Project Description

📖 2 mins read

What’s changing

You can now use your mobile phone as a security key in the Advanced Protection Program for the enterprise. This means you can use your Android or iOS device’s built-in security key for 2-Step Verification, which makes it easier and quicker to protect high-risk users with Google’s strongest account security settings.

Users can learn more and sign up for the Advanced Protection Program at

Who’s impacted

Google Workspace Admins and end users

Why you’d use it

The Advanced Protection Program for the enterprise enforces a package of several security policies, which can help protect the accounts of employees who are most at risk for targeted attacks. By adding the option to use your phone as a security key with this program,  Google Workspace users will be able to take advantage of the protection it offers due to:

  • Simpler enrollment – Users can sign up quickly using devices they already have.
  • Intuitive user experience – Users are familiar with the phone interface, and often already carry phones with them.
  • Lower costs – This reduces the need to purchase security keys.

Additional details

Targeted attacks describe sophisticated, low volume handcrafted attacks that are often carried out by highly motivated professional or government backed groups. Employees at risk of targeted attacks that may benefit from the program include, for example, IT admins, executives, and employees in regulated industries such as finance or government.

The individual policies currently included in the Advanced Protection Program are also available to Google Workspace admins and users outside of the program. However, the Advanced Protection Program for the enterprise offers an easy-to-use bundle of our strongest account security settings

Getting started

Admins: By default, users will be able to sign up for the Advanced Protection Program. You can disable it at the OU level. Visit the Help Center to learn more about managing the Advanced Protection Program in your organization.

End users:Android users can go directly to to enroll their phone as a security key. iPhone users must first activate the security key with Google’s Smart Lock app, then enroll in the Advanced Protection Program.

Rollout pace

  • This feature is available now for all users.


  • Available to all Google Workspace customers
Thanks for sharing and spreading the word!