Common questions with Advanced Protection
Advanced Protection adds enhanced security features to your Google Account.
- Helps protect you against phishing: A physical security key and password is needed to sign in. It's one of the strongest ways to secure your account against phishing.
- Helps keep your data safe: Advanced Protection limits the services that can access your data.
- Guards against people pretending to be you: If a claim is filed to recover your account, Advanced Protection takes extra steps to verify your identity.
How is Advanced Protection different from 2-Step Verification?
Advanced Protection uses 2-Step Verification with a physical security key instead of a code. Security keys are more secure than codes because a person needs your password and your security key to get into your account.What security keys do I need?
You’ll need to buy two security keys to enroll in Advanced Protection. You can search for
fido u2f security key and order a security key dongle from a trusted retailer, or follow the steps below.
Option 1: Order security key dongles together (Android users only)
If you have an Android device, get the set of security keys from Yubico.
Option 2: Order security key dongles separately
Advanced Protection uses security keys because they’re one of the most secure second steps for 2-Step Verification. Even if someone has your password, they won’t be able to get into your account because they don't have your security key.
Advanced Protection requires two security keys, in case one gets lost. Google suggests that you store your backup security key in a safe place.
If you still have account access:
- Get two replacement security keys.
- Go to your Google Account.
- On the left navigation panel, click Security.
- In the Signing in to Google panel, click 2-Step Verification.
- Click Add security key. Add your new security keys.
- Next to the lost security key, select Edit Remove this device.
If you don't have account access:
- Submit a request to recover your account. It will take a few days for Google to verify it’s you.
- While you wait, order two replacement security keys.
- You'll get an email to your recovery email address to let you know when you can access your account again. After you get that notification, sign in to your account.
- Turn on Advanced Protection again.
You should keep your security key with you any time you might need to sign in on a new device.
If you're traveling, bring your security key with you. If you’re bringing a Bluetooth security key dongle, you may want to charge it before you leave.
You’ll be able to sign in to your Google Account on Google apps and only in the Chrome browser (on desktop and mobile web). You won’t be able to use your Google Account with some apps and services that require access to your emails and Google Drive data.
You can still sign in to apps and services with Google. If they request access to your Gmail or Drive data, access will be denied.
Advanced Protection stops most non-Google apps and services from accessing your Google Drive and Gmail data. That way, your data is better protected against harmful or unsecure access.
- All Google apps and services
- Apple Mail, Calendar, and Contacts apps on iOS
- Mozilla Thunderbird
Let non-Google Apps access your Google data
Apple apps on iOS
You can use a temporary code to let some Apple apps access your Gmail and some other Google Account data.
You can use Mozilla Thunderbird to access your Gmail. Make sure you’re using the latest version of Thunderbird (60.0 or up).
Note: These steps only apply if your account uses Advanced Protection.
You can create a temporary code to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.
- If you haven’t already, install the Google Smart Lock app.
- On your iPhone or iPad, open Settings .
- Tap Passwords & Accounts Add Account Google.
- Follow the instructions to sign in to your account.
- When you’re prompted, open the Google Smart Lock app.
- Sign in or choose your account.
- Follow the steps to create a 6-digit temporary code.
- Open Settings again.
- Enter your 6-digit code.
- Tap Next.
If you get an error after signing in
Follow these steps if you see an error like, "There was a problem accessing your account."
- On your iPhone or iPad, tap Settings .
- Tap Passwords & Accounts Gmail Delete Account Delete from My iPhone. This will remove your account from the phone, but no data will be deleted from your Google Account.
- On the "Passwords & Accounts " screen, tap Add Account Google.
- Start again on step 4 for using your Google Account with some iPhone or iPad apps.
If you're seeing password prompts every few minutes
You can follow the instructions above to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.
You might not be signed in to the Google Account that was invited to Advanced Protection.
If you’re signed in with multiple accounts, sign out of all other accounts. After you've set up Advanced Protection, you can sign back in to your other accounts.
To register your Bluetooth key on your computer, use the USB cable to connect the key to your computer.
- On your Linux computer, go to Yubico's U2F Github page.
- Udev version 187 and lower: Go to Yubico's old U2F Github page.
- Find and download
- Open the Linux directory
70-u2f.rulesto the directory.
- If the directory already has a file with this name, open the file. Check that the content is the same as the one you downloaded.
- Save your file, and reboot your system.
If Safe Browsing can’t confirm that a download is safe, Chrome warns you that the file could be harmful.
Continue a download that was blocked by Chrome
Important: To protect your account and sensitive data, do not download files you’re warned about unless you’re certain that they’re safe.
On the pop-up about the blocked download, select Up arrow Keep.
If a file is known to be harmful, Safe Browsing won’t allow you to download it.
Why can't I sign in to my Android TV after turning on Advanced Protection?
After you turn on Advanced Protection, follow these steps to sign in to your Android TV:
- Remove your Google Account from your Android TV.
- Add your Google Account to your Android TV again and choose the option to set up using a phone that's on the same Wi-Fi network.