Google makes it easier for users to switch on advanced account protection
Briefly

Google is allowing people to use passkeys rather than physical security keys for its Advanced Protection Program, making strong multifactor authentication more accessible.
APP requires passkeys or physical keys, alongside passwords, preventing account takeovers like the 2016 Kremlin-backed hack of Democratic officials' Gmail accounts and email leaks during the U.S. presidential election.
Google's decision to broaden enrollment options for APP responds to user feedback on physical key accessibility and affordability, now allowing multiple passkeys or a mix of passkey and physical token.
Users must still have two keys to enroll in APP to avoid lockouts, which can be especially problematic due to a rigorous recovery process unique to the program.
Read at Ars Technica
[
|
]