Skip to main content

Your iPhone can now act as a physical Google security key

A year after introducing it for Android phones, Google has today announced that iPhones can now function as physical two-factor security keys for logging into the company’s own services like Gmail in Chrome. This authentication method is a lot more secure than the two-factor prompt you’re likely used to, as it requires your iPhone to be physically in the computer’s proximity.

Two-factor authentication adds an extra layer of security to your accounts. However, SMS and internet-based two-factor processes have been in the past failed to prove as secure as one would hope for. Google’s solution for that takes advantage of your phone’s Bluetooth to turn it into a dedicated security key and ensures you’re physically authenticating the login.

In addition, the new Google Smart Lock update is said to be storing your credentials in the same Secure Enclave section of your iPhone’s chipset that’s also responsible for housing other sensitive data such as Touch ID and Face ID biometric information — which is why it’s only available on iOS 10 and above.

To set this up for your accounts, you will have to first head over to the app store and download the free Google Smart Lock app. Once it’s installed, log into your account, follow the on-screen instructions and you should be up and running in a couple of minutes. Now, whenever you try to sign in to a Google service on Chrome, you will be asked to authenticate the access on your iPhone through a push notification as long as it’s within the computer’s Bluetooth range.

What’s more, the added functionality makes iPhones eligible for Google’s Advanced Protection Program, the search-engine company’s most secured defense against attacks like phishing. It was designed primarily for users whose data is constantly under hackers’ crosshair including activists, journalists, and political campaign teams. The program already supports Android phones (7.0+) and physical security keys.

Google’s physical key feature for phones is currently restricted to Chrome and won’t work on other browsers like Firefox. If you have configured it and you attempt to sign-in on non-compatible browsers, you will have to select an alternate two-factor method.

Editors' Recommendations

Shubham Agarwal
Shubham Agarwal is a freelance technology journalist from Ahmedabad, India. His work has previously appeared in Firstpost…
An iPhone just sold for a crazy amount at auction
An original, unsealed iPhone.

An original, still-boxed iPhone. LCG Auctions

Rare iPhones have been going under the hammer for some large sums in recent months, and the latest auction to feature one of the first Apple handsets has just smashed the record for such a device.

Read more
I’ll be furious if the iPhone 15 Pro doesn’t get this one feature
A black iPhone 14 Pro lying on a table.

It’s peak summer season, but that also means we’re getting closer to Apple’s fall event in September. This is typically when we expect the next generation of iPhones and Apple Watches.

This year, we’re expecting the iPhone 15 lineup, which should include the standard iPhone 15, iPhone 15 Plus, iPhone 15 Pro, and iPhone 15 Pro Max. On top of that, it’s safe to say that we should also see the Apple Watch Series 9, but whether we’re getting a second-generation Apple Watch Ultra is still up in the air. And new AirPods? Who knows! Regardless, it will be exciting and jam-packed with a ton of new products.

Read more
Vital security update for Apple devices takes only a few minutes to install
iPhone 14 Pro Max in hand.

UPDATE: Just hours after rolling out the security update, Apple has pulled it after users began experiencing compatibility issues with Safari for sites such as Instagram and Facebook. If you've already installed the update, you can downgrade on iPhone and iPad by going to Settings, then General. Select About and then OS version. Finally, tap Remove Security Response.

For Mac, select the Apple logo top left and then System Settings. Next, select General, and then About. Under macOS, select the "i" (information) button located beside the OS version. Where it says Last Security Response, select the Remove & Restart button, and then Remove Response and Restart in the prompt.

Read more