Common questions with Advanced Protection

Advanced Protection adds enhanced security features to your Google Account.

  • Protects you against phishing: A physical security key and password is needed to sign in. It's the strongest way to secure your account against phishing.
  • Helps keep your data safe: Advanced Protection limits the services that can access your data.
  • Guards against people pretending to be you: If you lose your security key or account access, Advanced Protection takes extra steps to verify your identity.

How is Advanced Protection different from 2-Step Verification?

Advanced Protection uses 2-Step Verification with a physical security key instead of a code. Security keys are more secure than codes because a person needs your password and your security key to get into your account.

Questions about security keys

What security keys do I need?

You’ll need to buy two security keys to enroll in Advanced Protection. You can search for fido u2f security key and order from a trusted retailer, but links are provided here for your convenience:

Order security keys together (Android users only)

If you have an Android device, get the set of security keys from Yubico.

Order security keys separately

  1. One that connects to USB ports for your computer:
  2. One that connects wirelessly to your phone:
Why do I need security keys?

Advanced Protection uses security keys because they’re the most secure second step for 2-Step Verification. Even if a someone has your password, they won’t be able to get into your account because they don't have your security key.

Advanced Protection requires two security keys. Google suggests that you carry the main security key (Bluetooth) with you at all times. You should store the backup security key (USB) in a safe place.

What happens if I lose my security key?

If you still have account access:

  1. Buy two replacement security keys.
  2. Go to your Google Account.
  3. On the left navigation panel, click Security.
  4. In the Signing in to Google panel, click 2-Step Verification.
  5. Click Add security key. Add your new security keys.
  6. Next to the lost security key, select Edit Edit and then Remove this device.

If you don't have account access:

  1. Submit a request to recover your account. It will take a few days for Google to verify it’s you.
  2. While you wait, order two replacement security keys.
  3. You'll get an email to your recovery email address to let you know when you can access your account again. After you get that notification, sign in to your account.
  4. Turn on Advanced Protection again.
Do I need to keep a security key with me at all times?

Yes. You should keep your security key with you, in case you need to sign in on a new device.

If you're traveling, bring your security key with you. You may want to charge your Bluetooth key before you leave.

Questions about Google products

Can I still use Google products?

You’ll be able to sign in to your Google Account on Google apps and only in the Chrome browser (on desktop and mobile web). You won’t be able to use your Google Account with some apps and services that require access to your emails and Google Drive data.

Can I still use "Sign in with Google"?
You can still sign in to apps and services with Google. If they request access to your Gmail or Drive data, access will be denied unless you use an additional code.
Why am I being asked to sign in to multiple Google apps on my iPhone?
With Advanced Protection, you'll need sign in to individual Google apps separately. Open each Google app you'd like to use with this account and turn on the account.

Questions about non-Google services

Can I use non-Google apps or services?

Advanced Protection stops most non-Google apps and services from accessing your Google Drive and Google data. That way, your data is better protected against harmful or unsecure access.

After you turn on Advanced Protection, you can allow these apps and services to access your Google data:

  • All Google apps and services
  • Apple Mail, Calendar, and Contacts apps on iOS
  • Mozilla Thunderbird

Let non-Google Apps access your Google data

Apple apps on iOS

You can use a temporary code to let some Apple apps access your Gmail and some other Google Account data.

Mozilla Thunderbird

You can use Mozilla Thunderbird to access your Gmail. Make sure you’re using the latest version of Thunderbird (60.0 or up).

Can I use my iPhone and iPad apps with Advanced Protection?

Use some iPhone and iPad apps with your Google Account

Note: These steps only apply if your account uses Advanced Protection.

You can create a temporary code to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.

  1. If you haven’t already, install the Google Smart Lock app.
  2. On your iPhone or iPad, open Settings Settings.
  3. Tap Passwords & Accounts and then Add Account and then Google.
  4. Follow the instructions to sign in to your account.
  5. When you’re prompted, open the Google Smart Lock app.
  6. Sign in or choose your account.
  7. Follow the steps to create a 6-digit temporary code.
  8. Open Settings Settings again.
  9. Enter your 6-digit code.
  10. Tap Next.

If you get an error after signing in

Follow these steps if you see an error like, "There was a problem accessing your account."

  1. On your iPhone or iPad, tap Settings Settings.
  2. Tap Passwords & Accounts and then Gmail and then Delete Account and then Delete from My iPhone. This will remove your account from the phone, but no data will be deleted from your Google Account.
  3. On the "Passwords & Accounts " screen, tap Add Account and then Google.
  4. Start again on step 4 for using your Google Account with some iPhone or iPad apps.

If you're seeing password prompts every few minutes

You can follow the instructions above to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.

Can I still use App passwords?
No. Apps that use App passwords instead of 2-Step Verification are blocked for users with Advanced Protection.

Fix problems with Advanced Protection

Why do I get a 404 error when I try to enroll?

You might not be signed in to the Google Account that was invited to Advanced Protection.

If you’re signed in with multiple accounts, sign out of all other accounts. After you've set up Advanced Protection, you can sign back in to your other accounts.

Why won’t my Bluetooth key work with Chrome on computers?

To register your Bluetooth key on your computer, use the USB cable to connect the key to your computer.

Why won't my security key work with my Linux computer?
  1. On your Linux computer, go to Yubico's U2F Github page. 
  2. Find and download 70-u2f.rules.
  3. Open the Linux directory /etc/udev/rules.d/.
  4. Add 70-u2f.rules to the directory.
    • If the directory already has a file with this name, open the file. Check that the content is the same as the one you downloaded.
  5. Save your file, and reboot your system.
Why won’t my Bluetooth key connect to my Android?

On your Android phone or tablet, turn on Bluetooth. If your security key still won't connect, temporarily turn on Location Services when you use your security key.

How do I turn off Advanced Protection?
You can turn Advanced Protection off in your Google Account.

Why can't I sign in to my Android TV after turning on Advanced Protection?

After you turn on Advanced Protection, follow these steps to sign in to your Android TV:

  1. Remove your Google Account from your Android TV.
  2. Add your Google Account to your Android TV again and choose the option to set up using a phone that's on the same Wi-Fi network.

 

 

 

 

Was this article helpful?
How can we improve it?