usb security key fido2 certified bank of america

The proper solution for that problem is for the conference room PC to have its own account, which is invited to the hangout, rather than logging in with some individual's account. a PC set up for conference calls, and someone needs to log in to pull up the hangout, it's a different story When you go to a conference room with a e.g. but I suppose resistance to phishing attacks is as much about social intelligence as anything else, and Google hires a lot of socially inept people. I would have thought that Google employees were too smart to be phished. Google's security operations team determined that the risk of theft of a security key is actually lower in practice than the risk that an employee's phone-based OTP might be phished. Well, it's also a problem if you use a particularly lousy password, and if you don't notice that the laptop/key are gone soon enough that you can disable the key before the attacker guesses your password.įWIW, Google switched to using security keys for corporate account authentication a while ago. However, in order to make use of it they have to have (or guess) your password as well, so it's really only a risk if someone is specifically targeting you, in which case they could also steal your phone. If someone steals your laptop they have your key. There's an obvious downside of leaving the key plugged into your laptop, of course. I just leave it plugged into my laptop all the time, so there's no 'fumbling with USB sticks', I just run my finger along the side of the laptop until it hits the key. just enough that you can touch it to activate it.

It's a tiny device, only extends from the USB port by a millimeter or so. I don't see how fumbling around with USB sticks is much better.

Usb security key fido2 certified bank of america