Common questions with Advanced Protection Program

Advanced Protection adds enhanced security features to your Google Account.

  • Defends against phishing and account hacking: Security keys are widely considered the best way to verify and protect your account. Even if a hacker gets your password, they can’t sign into your account without your security key.
  • Safeguards your data: Advanced Protection limits the third-party sites and apps that can access your data.
  • Blocks hackers from impersonating you to access your account: If anyone tries to recover your account, Advanced Protection takes extra steps to verify your identity.

How is Advanced Protection different from 2-Step Verification?

With 2-Step Verification, you sign in with:

  • Your password
  • A second step, like entering a code from an app or tapping a prompt on your phone

Advanced Protection helps secure sensitive accounts even more. With Advanced Protection, you sign in with:

In addition, Advanced Protection limits which third-party apps can access your data and tightens account recovery security to prevent unauthorized users from getting access to your account.

Questions about security keys

Why do I need security keys?
Advanced Protection uses security keys because they’re one of the most secure second steps for 2-Step Verification. You'll use a security key the first time you sign-in to your Google Account on a new device.
Are security keys effective?
Our research shows that security keys are more effective at stopping hackers than any other common methods.
What security keys do I need and where can I order them?
We recommend a primary key and at least one backup USB key. Keys can be purchased from Google or a trusted retailer. Learn more about ordering security keys.
What happens if I lose my security key?

If you still have account access:

  1. Get one or more replacement security keys.
  2. Go to your Google Account.
  3. On the left navigation panel, click Security.
  4. In the Signing in to Google panel, click 2-Step Verification.
  5. Click Add security key. Add your new security keys.
  6. Next to the lost security key, select Edit Editand then Remove this key.

If you don't have account access:

  1. Submit a request to recover your account. It will take a few days for Google to verify it’s you.
  2. While you wait, order one or more replacement security keys.
  3. You'll get an email to your recovery email address to let you know when you can access your account again. After you get that notification, sign in to your account.
  4. Turn on Advanced Protection again.
Do I need to keep a security key with me at all times?

You should keep your security key with you any time you might need to sign in on a new device.

If you're traveling, bring your security key with you. If you’re bringing a Bluetooth security key, you may want to charge it before you leave.

Questions about Google products

Can I still use Google products?
You’ll be able to sign into your Google Account on Google apps and only in the Chrome browser (on desktop and mobile web). You won’t be able to use your Google Account with some apps and services that require access to your emails and Google Drive data.
Can I still use "Sign in with Google"?

You can still sign into apps and services with Google. If they request access to your Gmail or Drive data, access will be denied.

Tip: You can use an additional code to give some supported apps access to your Gmail or Drive data.
Can I use Advanced Protection with Nest?

Yes, Nest works with Google Accounts, including accounts that are enrolled in the Advanced Protection Program. To help you manage all your Google Nest and Google Home devices, you can migrate your Nest Account to a Google Account.

For privacy-related info about Google Nest connected home devices and services, see these FAQs on privacy.

Share with other home members more securely

To help keep your Google Nest and Google Home devices secure, follow these tips:

  1. Only add home members you trust. Keep in mind that:
    • Any home member can access devices, media services, addresses, and home activity.
    • Home members can add new devices to your home.
    • Home members can add or remove other home members, including you. Any time a member is added to your home, all home members will get an email notification.
  2. If your Google Account is enrolled in Advanced Protection, we strongly recommend that all home members enroll in Advanced Protection. That way, all home members are equally protected against unauthorized access to their Google Account and home devices or services.

Questions about non-Google services

Can I use non-Google apps or services?

Advanced Protection stops most non-Google apps and services from accessing data like your Google Drive and Gmail data. That way, your data is better protected against harmful or unsecure access.

After you turn on Advanced Protection, you can allow these apps and services to access your Google data:

  • All Google apps and services
  • Apple Mail, Calendar, and Contacts apps on iOS
  • Mozilla Thunderbird

Let non-Google Apps access your Google data

Apple apps on iOS

You can use a temporary code to let some Apple apps access your Gmail and some other Google Account data.

Mozilla Thunderbird

You can use Mozilla Thunderbird to access your Gmail. Make sure you’re using the latest version of Thunderbird (60.0 or up).

Can I use Advanced Protection with my Mac?

You can use Advanced Protection with a Mac running macOS 10.5 or above. To add a security key, use the following steps:

  1. On your computer, go to System Preferences.
  2. Click Internet Accountand thenGoogle.
  3. Follow the instructions to sign in.
Can I use my iPhone and iPad apps with Advanced Protection?

Important: These steps only apply if your account uses Advanced Protection.

You can create a temporary code to let Apple’s Mail, Contacts, and Calendar apps on iOS access your Gmail and some other Google Account data.

  1. If you haven’t already, install the Google Smart Lock app.
  2. On your iPhone or iPad, open Settings Settings.
  3. Tap Passwords & Accountsand thenAdd Accountand thenGoogle.
  4. Follow the instructions to sign in to your account.
  5. When you’re prompted, open the Google Smart Lock app.
  6. Sign in or choose your account.
  7. Follow the steps to create a 6-digit temporary code.
  8. Open Settings Settings again.
  9. Enter your 6-digit code.
  10. Tap Next.

If you get an error after signing in

If you see an error like, "There was a problem accessing your account," use the following steps:

  1. On your iPhone or iPad, tap Settings Settings.
  2. Tap Passwords & Accountsand thenGmailand thenDelete Accountand thenDelete from My iPhone. This will remove your account from the phone, but no data will be deleted from your Google Account.
  3. On the "Passwords & Accounts " screen, tap Add Accountand thenGoogle.
  4. Start again on step 4 for using your Google Account with some iPhone or iPad apps.

If you're seeing password prompts every few minutes

You can follow the instructions above to let Apple’s Mail, Contacts, and Calendar apps access your Gmail and some other Google Account data.

Can I still use App passwords?
No. Apps that use App passwords instead of 2-Step Verification are blocked for users with Advanced Protection.

Fix problems with Advanced Protection

Why do I get a 404 error when I try to enroll?

You might not be signed in to the Google Account that was invited to Advanced Protection.

If you’re signed in with multiple accounts, sign out of all other accounts. After you've set up Advanced Protection, you can sign back into your other accounts.

Why won’t my Bluetooth security key work with Chrome on computers?
To register your Bluetooth key on your computer, use the USB cable to connect the key to your computer.
Why won't my security key work with my Linux computer?

To set up a Security Key on a computer running a Linux-based operating system, you may need to add a new udev rule.

  1. Go to this directory: /etc/udev/rules.d
  2. Create a new file for your Security Key.
  3. Name your file (for example: 70-key.rules).
  4. In the new file, paste the instructions for your udev version. If you don’t know your udev version, run the command: sudo udevadm --version
    • Udev version 188 or higher:
      • KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="18d1|096e", ATTRS{idProduct}=="5026|0858|085b", TAG+="uaccess"
    • Udev version 187 or lower:
      • KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="18d1", ATTRS{idProduct}=="5026", GROUP="plugdev", MODE="0660"
  5. Save your file and run the command: sudo udevadm control --reload-rules

Restart your computer and Add a Security Key to your Google Account.

Why did Chrome stop my download?
If Safe Browsing can’t confirm that a download is safe, Chrome warns you that the file could be harmful.

Continue a download that was blocked by Chrome

Important: To protect your account and sensitive data, do not download files you’re warned about unless you’re certain that they’re safe.

On the pop-up about the blocked download, select Up arrowUp arrowand thenKeep.

If a file is known to be harmful, Safe Browsing won’t allow you to download it.

Why won’t my Bluetooth security key connect to my Android device?
On your Android phone or tablet, turn on Bluetooth. If your security key still won't connect, temporarily turn on Location Services when you use your security key.
Why does my Windows 10 device say Bluetooth is not turned on?

When you try to sign into a Windows 10 device with your phone’s built-in security key, you may receive the message “Turn on Bluetooth to allow pairing". The notification may appear even if you turned on Bluetooth on both your phone and Windows 10 device.

To allow your phone's built-in security key to connect to your Windows 10 device:

  1. Open Windows 10: Settings and then Privacy and then Radios
  2. Under "Allow apps to control device radios", turn on.
How do I turn off Advanced Protection?

You can turn Advanced Protection off in your Google Account.

  1. Go to the Security section of your Google Account using a device that’s already signed in.
  2. Under "Advanced Protection Program," select Unenroll.
  3. Follow the on-screen instructions to unenroll.
Why can't I sign in to my Android TV after turning on Advanced Protection?

After you turn on Advanced Protection, follow these steps to sign in to your Android TV:

  1. Remove your Google Account from your Android TV.
  2. Add your Google Account to your Android TV again and choose the option to set up using a phone that's on the same Wi-Fi network.
Was this helpful?
How can we improve it?