Common questions with Advanced Protection

You’ll need to buy two security keys to enroll in Advanced Protection. You can search for fido u2f security key and order a security key dongle from a trusted retailer, or follow the steps below.

Option 1: Order security key dongles together (Android users only)

If you have an Android device, get the set of security keys from Yubico.

Option 2: Order security key dongles separately

1. Get one that connects to USB ports for your computer:
   • USB-A (most computers): Yubico U2F FIDO USB Key
   • USB-C (like the new Macbook Pro): Yubico YubiKey 5C
2. Get one that connects wirelessly to your phone:
   • iPhone and iPad: Feitian Multipass BLE/NFC
   • Android with NFC: Yubico NEO NFC

Advanced Protection uses security keys because they’re one of the most secure second steps for 2-Step Verification. Even if someone has your password, they won’t be able to get into your account because they don't have your security key.

Advanced Protection requires two security keys, in case one gets lost. Google suggests that you store your backup security key in a safe place.

If you still have account access:

1. Get two replacement security keys.
2. Go to your Google Account.
3. On the left navigation panel, click Security.
4. In the Signing in to Google panel, click 2-Step Verification.
5. Click Add security key. Add your new security keys.
6. Next to the lost security key, select Edit Remove this key.

If you don't have account access:

1. Submit a request to recover your account. It will take a few days for Google to verify it’s you.
2. While you wait, order two replacement security keys.
3. You'll get an email to your recovery email address to let you know when you can access your account again. After you get that notification, sign in to your account.
4. Turn on Advanced Protection again.

You should keep your security key with you any time you might need to sign in on a new device.

If you're traveling, bring your security key with you. If you’re bringing a Bluetooth security key dongle, you may want to charge it before you leave.

You’ll be able to sign in to your Google Account on Google apps and only in the Chrome browser (on desktop and mobile web). You won’t be able to use your Google Account with some apps and services that require access to your emails and Google Drive data.

You can still sign in to apps and services with Google. If they request access to your Gmail or Drive data, access will be denied.

Note: You can use an additional code to give some supported apps access to your Gmail or Drive data.

With Advanced Protection, you'll need to turn on individual Google apps separately. Open each Google app you'd like to use with this account and turn on the account.

Advanced Protection stops most non-Google apps and services from accessing your Google Drive and Gmail data. That way, your data is better protected against harmful or unsecure access.

After you turn on Advanced Protection, you can allow these apps and services to access your Google data:

• All Google apps and services
• Apple Mail, Calendar, and Contacts apps on iOS
• Mozilla Thunderbird

Let non-Google Apps access your Google data

Apple apps on iOS

You can use a temporary code to let some Apple apps access your Gmail and some other Google Account data.

Mozilla Thunderbird

You can use Mozilla Thunderbird to access your Gmail. Make sure you’re using the latest version of Thunderbird (60.0 or up).

Use some iPhone and iPad apps with your Google Account

Note: These steps only apply if your account uses Advanced Protection.

You can create a temporary code to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.

1. If you haven’t already, install the Google Smart Lock app.
2. On your iPhone or iPad, open Settings .
3. Tap Passwords & Accounts Add Account Google.
4. Follow the instructions to sign in to your account.
5. When you’re prompted, open the Google Smart Lock app.
6. Sign in or choose your account.
7. Follow the steps to create a 6-digit temporary code.
8. Open Settings again.
9. Enter your 6-digit code.
10. Tap Next.

If you get an error after signing in

Follow these steps if you see an error like, "There was a problem accessing your account."

1. On your iPhone or iPad, tap Settings .
2. Tap Passwords & Accounts Gmail Delete Account Delete from My iPhone. This will remove your account from the phone, but no data will be deleted from your Google Account.
3. On the "Passwords & Accounts " screen, tap Add Account Google.
4. Start again on step 4 for using your Google Account with some iPhone or iPad apps.

If you're seeing password prompts every few minutes

You can follow the instructions above to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.

No. Apps that use App passwords instead of 2-Step Verification are blocked for users with Advanced Protection.

You might not be signed in to the Google Account that was invited to Advanced Protection.

If you’re signed in with multiple accounts, sign out of all other accounts. After you've set up Advanced Protection, you can sign back in to your other accounts.

To register your Bluetooth key on your computer, use the USB cable to connect the key to your computer.

1. On your Linux computer, go to Yubico's U2F Github page.
   • Udev version 187 and lower: Go to Yubico's old U2F Github page.
2. Find and download 70-u2f.rules.
3. Open the Linux directory /etc/udev/rules.d/.
4. Add 70-u2f.rules to the directory.
   • If the directory already has a file with this name, open the file. Check that the content is the same as the one you downloaded.
5. Save your file, and reboot your system.

On your Android phone or tablet, turn on Bluetooth. If your security key still won't connect, temporarily turn on Location Services when you use your security key.

You can turn Advanced Protection off in your Google Account.

After you turn on Advanced Protection, follow these steps to sign in to your Android TV:

1. Remove your Google Account from your Android TV.
2. Add your Google Account to your Android TV again and choose the option to set up using a phone that's on the same Wi-Fi network.