Use a security key for 2-Step Verification

Security keys connect to your device to help prove you own your Google Account. With them, you get the extra protection of 2-Step Verification and can sign in without your phone.

Note: If you’re a journalist, activist, or someone else at risk of targeted online attacks, learn about the Advanced Protection Program.

Requirements to use a security key

  • Have a computer with the latest version of Chrome. Learn how to update Chrome.
  • Have a security key that plugs into a USB port and works with FIDO Universal 2nd Factor (U2F).

Step 1: Get your key

If you don't have one already, you can buy a security key online from a trusted retailer.

Step 2: Add a key to your account

  1. On a computer, go to the 2-Step Verification section of your Google Account.
  2. If you haven’t set up 2-Step Verification already, click Get started. Otherwise skip to step 3.
  3. Click Add Security Key. Don’t insert your key yet.
  4. Click Next.
  5. Insert your key. Tap the button or gold tip if your key has one.
  6. Follow the instructions.
  7. To make sure you can still sign in if your key ever gets lost, add recovery info and backups.

Step 3: Sign in with your key

Note: Currently, you can’t use Google’s Titan Security Key to sign in with Near Field Communication (NFC). Soon, you’ll be able to update your Android device so you can sign in with NFC. Until then, you can use Bluetooth or USB to sign in with your Titan Security Key on Android devices.

You'll only connect your key when you add your Google Account, not every time you use your phone.

  1. On your Android phone or tablet, sign in to your Google Account.
  2. Your phone will detect if your account has a security key. Follow the steps to connect your key. Depending on your key, you’ll:
    • Insert your key into the USB port.
    • Tap your key to the back of your device.
    • Pair your key to your device.

If someone tries to sign in to your account from another device, they’ll be asked for your security key.

Fix problems

  • If a key doesn't work on your device or browser, you might see an option to sign in with a verification code or prompt instead.
  • If your Google Account is through your work, school, or other group: Contact your administrator for help or if you need a verification code.
  • If your device was reset to factory settings, follow these steps to update Google Play services:
    1. On your Android device, sign in with an account that doesn't use a security key.
    2. Google Play Services should start updating automatically. If it doesn't, go to the Google Play services page and tap Update.
    3. Follow the steps above to add a key to your account.
Was this article helpful?
How can we improve it?