Common questions with Advanced Protection
Advanced Protection adds enhanced security features to your Google Account.
- Helps protect you against phishing: A physical security key and password is needed to sign in. It's one of the strongest ways to secure your account against phishing.
- Helps keep your data safe: Advanced Protection limits the services that can access your data.
- Guards against people pretending to be you: If anyone tries to recover your account, Advanced Protection takes extra steps to verify your identity.
How is Advanced Protection different from 2-Step Verification?
Advanced Protection uses 2-Step Verification with a physical security key instead of a code. Security keys are more secure than codes because a person needs your password and your security key to get into your account.
Questions about security keys
What security keys do I need?You’ll need to buy two security keys to enroll in Advanced Protection. You can search for fido u2f security key
and order a security key dongle from a trusted retailer, or follow the steps below.
Option 1: Order security key dongles together (Android users only)
If you have an Android device, get the set of security keys from Yubico.
Option 2: Order security key dongles separately
- Get one that connects to USB ports for your computer:
- USB-A (most computers): Yubico U2F FIDO USB Key
- USB-C (like the new Macbook Pro): Yubico YubiKey 5C
- Get one that connects wirelessly to your phone:
- iPhone and iPad: Feitian Multipass BLE/NFC
- Android with NFC: Yubico NEO NFC
Advanced Protection uses security keys because they’re one of the most secure second steps for 2-Step Verification. Even if someone has your password, they won’t be able to get into your account because they don't have your security key.
Advanced Protection requires two security keys, in case one gets lost. Google suggests that you store your backup security key in a safe place.
If you still have account access:
- Get two replacement security keys.
- Go to your Google Account.
- On the left navigation panel, click Security.
- In the Signing in to Google panel, click 2-Step Verification.
- Click Add security key. Add your new security keys.
- Next to the lost security key, select Edit
Remove this key.
If you don't have account access:
- Submit a request to recover your account. It will take a few days for Google to verify it’s you.
- While you wait, order two replacement security keys.
- You'll get an email to your recovery email address to let you know when you can access your account again. After you get that notification, sign in to your account.
- Turn on Advanced Protection again.
You should keep your security key with you any time you might need to sign in on a new device.
If you're traveling, bring your security key with you. If you’re bringing a Bluetooth security key dongle, you may want to charge it before you leave.
Questions about Google products
Can I still use Google products?You’ll be able to sign in to your Google Account on Google apps and only in the Chrome browser (on desktop and mobile web). You won’t be able to use your Google Account with some apps and services that require access to your emails and Google Drive data.
You can still sign in to apps and services with Google. If they request access to your Gmail or Drive data, access will be denied.
Note: You can use an additional code to give some supported apps access to your Gmail or Drive data.
Questions about non-Google services
Can I use non-Google apps or services?Advanced Protection stops most non-Google apps and services from accessing your Google Drive and Gmail data. That way, your data is better protected against harmful or unsecure access.
After you turn on Advanced Protection, you can allow these apps and services to access your Google data:
- All Google apps and services
- Apple Mail, Calendar, and Contacts apps on iOS
- Mozilla Thunderbird
Let non-Google Apps access your Google data
Apple apps on iOS
You can use a temporary code to let some Apple apps access your Gmail and some other Google Account data.
Mozilla Thunderbird
You can use Mozilla Thunderbird to access your Gmail. Make sure you’re using the latest version of Thunderbird (60.0 or up).
Use some iPhone and iPad apps with your Google Account
Note: These steps only apply if your account uses Advanced Protection.
You can create a temporary code to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.
- If you haven’t already, install the Google Smart Lock app.
- On your iPhone or iPad, open Settings
.
- Tap Passwords & Accounts
Add Account
Google.
- Follow the instructions to sign in to your account.
- When you’re prompted, open the Google Smart Lock app.
- Sign in or choose your account.
- Follow the steps to create a 6-digit temporary code.
- Open Settings
again.
- Enter your 6-digit code.
- Tap Next.
If you get an error after signing in
Follow these steps if you see an error like, "There was a problem accessing your account."
- On your iPhone or iPad, tap Settings
.
- Tap Passwords & Accounts
Gmail
Delete Account
Delete from My iPhone. This will remove your account from the phone, but no data will be deleted from your Google Account.
- On the "Passwords & Accounts " screen, tap Add Account
Google.
- Start again on step 4 for using your Google Account with some iPhone or iPad apps.
If you're seeing password prompts every few minutes
You can follow the instructions above to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.
Fix problems with Advanced Protection
Why do I get a 404 error when I try to enroll?You might not be signed in to the Google Account that was invited to Advanced Protection.
If you’re signed in with multiple accounts, sign out of all other accounts. After you've set up Advanced Protection, you can sign back in to your other accounts.
To register your Bluetooth key on your computer, use the USB cable to connect the key to your computer.
- On your Linux computer, go to Yubico's U2F Github page.
- Udev version 187 and lower: Go to Yubico's old U2F Github page.
- Find and download
70-u2f.rules
. - Open the Linux directory
/etc/udev/rules.d/
. - Add
70-u2f.rules
to the directory.- If the directory already has a file with this name, open the file. Check that the content is the same as the one you downloaded.
- Save your file, and reboot your system.
If Safe Browsing can’t confirm that a download is safe, Chrome warns you that the file could be harmful.
Continue a download that was blocked by Chrome
Important: To protect your account and sensitive data, do not download files you’re warned about unless you’re certain that they’re safe.
On the pop-up about the blocked download, select Up arrow Keep.
If a file is known to be harmful, Safe Browsing won’t allow you to download it.
On your Android phone or tablet, turn on Bluetooth. If your security key still won't connect, temporarily turn on Location Services when you use your security key.
Why can't I sign in to my Android TV after turning on Advanced Protection?
After you turn on Advanced Protection, follow these steps to sign in to your Android TV:
- Remove your Google Account from your Android TV.
- Add your Google Account to your Android TV again and choose the option to set up using a phone that's on the same Wi-Fi network.