High-risk Google Account users can now use passcodes

Google on Wednesday announced support for Passkeys for its Advanced Protection Program (APP). APP is the tech giant’s strongest level of Google Account security, aimed at users who are at high risk of cyberattacks. With this move, the company will allow users to enroll in the service and access their accounts without the need for a physical security key. The feature is accessible on compatible devices and browsers. In addition, the company also announced its partnership with Internews to provide safety and security support to journalists and human rights activists.

Google rolls out password support to APP accounts

In a blog postThe company emphasized that users with a standard Google account can now sign up for the APP service without purchasing physical security keys by opting for passkeys. Previously, users were required to possess two physical security keys to sign up for the service. To log in to their account, they needed their password and one of the security keys.

Physical security keys are small devices that usually resemble a USB drive or keychain. They can be inserted into the device via the USB port or transfer data via NFC. These physical keys are designed to make it incredibly difficult for a hacker to break into a device remotely.

Google stressed that it may not be possible for individuals to carry a physical key with them at all times. Therefore, passkey, which uses biometric or device authentication, was introduced as an alternative.

To register for the service, users can now visit the APP registration page, click Get Started and follow the on-screen instructions. The company emphasized that users will need a compatible device and browser to register using passwords. APP will also allow users to add recovery options such as phone number and email address, another password or security key to regain access to the account in case they get locked out.

Designed by the FIDO Alliance, a passkey is an alternative login authentication method that replaces traditional methods such as SMS codes in favor of biometric or device authentication. The security measure has been adopted by Apple, Google, Microsoft, and other major tech companies in their products and services.

While standard Google accounts already have passkey support, APP accounts were not included prior to this announcement. APP is specifically targeted at people at high risk of cyberattacks, such as journalists, elected officials, political campaign workers, and human rights activists.