Your Android Phone Is a Security Key
blog.google
Your Android Phone Is a Security Key
1–10 of 144 posts
Re: Your Android Phone Is a Security Key
#2I don't know how I feel about making a device so endlessly hackable a "security key".
Re: Your Android Phone Is a Security Key
#3I don't know how I feel about making a device so endlessly hackable a "security key".
Aren't you already using Authenticator running on an Android device?
Re: Your Android Phone Is a Security Key
#4I don't know how I feel about making a device so endlessly hackable a "security key".
Um, yes. Plus it uses "Google Cloud".
A security key device ought not to be remotely writeable.
Re: Your Android Phone Is a Security Key
#5Re: Your Android Phone Is a Security Key
#6Earlier quoted context omitted.
Aren't you already using Authenticator running on an Android device?
That doesn't mean I think it's a good idea. A phone is better than nothing. A real token would be much better.
I'd argue using Authenticator is better than simply not using 2FA. Which is probably the choice for a lot of people for whom always carrying some dedicated hardware device is not really a realistic option.
Re: Your Android Phone Is a Security Key
#7Earlier quoted context omitted.
That doesn't mean I think it's a good idea. A phone is better than nothing. A real token would be much better.
I'd argue using Authenticator is better than simply not using 2FA. Which is probably the choice for a lot of people for whom always carrying some dedicated hardware device is not really a realistic option.
absolutely. it’s a second thing to hack. just because it’s _possible_ to hack the second thing doesn’t mean it isn’t helpful.
Re: Your Android Phone Is a Security Key
#8Earlier quoted context omitted.
That doesn't mean I think it's a good idea. A phone is better than nothing. A real token would be much better.
I'd argue using Authenticator is better than simply not using 2FA. Which is probably the choice for a lot of people for whom always carrying some dedicated hardware device is not really a realistic option.
In what way is carrying a dedicated device not realistic? My second factor lives on my keyring and is only a bit larger than a typical door key. Everyone carries keys.
Re: Your Android Phone Is a Security Key
#9My phone already prompts me when I login to a google account on another device.
Is this new / different?
Re: Your Android Phone Is a Security Key
#10This is great. Hopefully it'll get more people using 2FA. I don't think this is the best security practice, as others are nothing how insecure Android is. But it's better than nothing. It also pushes more people to use FIDO and 2FA. This is for the average person. If you want more get an yubi key or something.