The Advanced Protection Program (APP) is a security service offered by Google, designed to provide the highest level of account security for individuals who are at a higher risk of cyberattacks, such as journalists, public figures, and activists. Previously, enrollment in APP required two physical security keys, which could be inconvenient for some users. To address this issue, Google has introduced passkeys, which streamline the enrollment process by leveraging the security features of the user’s existing device, such as a smartphone or laptop.
Passkeys are built on Web Authentication (WebAuthn) technology and generate two unique keys. The public key is stored by the service being signed into, while the private key remains on the user’s device for verification. Passkeys work seamlessly with various security methods, such as fingerprint scanners, facial recognition, PINs, or screen lock patterns, providing a more user-friendly and robust authentication method.
Both Apple’s and Google’s built-in password managers, as well as popular password managers like 1Password, KeePassXC, and Dashlane, already support passkeys. To enroll in APP with a passkey, users need a compatible device and browser. Most desktop browsers and some mobile browsers now support passkeys. The enrollment process is straightforward, with users visiting the APP enrollment page and following the on-screen instructions. Google mandates a recovery option during enrollment, such as a phone number and email or another passkey/security key, to ensure account access in case of lockouts.
In addition to APP, Google has partnered with Internews, a non-profit organization supporting independent media outlets globally. This collaboration aims to provide digital security training to journalists and human rights workers in 10 countries across Europe, Asia, and Latin America. The training will focus on equipping participants with the knowledge and tools to defend against phishing attacks and other online threats. This initiative complements Google’s ongoing work to make online safety tools and resources like APP, Project Shield, and more easily available for high-risk users.
