Get answers to frequently asked questions or troubleshoot issues with the Advanced Protection Program.
How is Advanced Protection different from 2-Step Verification?
With Advanced Protection, you’re required to sign in with a passkey or security key because they’re more secure sign in methods.
Also, Advanced Protection limits third-party app access to your data, puts stronger checks on suspicious downloads, and tightens account recovery security to help prevent unauthorized access.
Basic questions about Advanced Protection
How much does Advanced Protection cost?Can I enroll more than one account?
- Add a recovery email and phone number to your Google Account to help you recover the account if you get locked out.
- Turn on 2-Step Verification in your Google Account.
- Order one or more security keys, if you choose to use security keys and don’t already have them.
Can I enroll with my Google Workspace Account?
Questions about passkeys & security keys
What are passkeys & security keys?Passkeys are a simple and secure alternative to passwords. With a passkey, you can sign in to your Google Account with your fingerprint, face scan, or device screen lock, like a PIN. You can create a passkey on a phone, computer, or hardware security key. Create a passkey.
A hardware security key is a small device that connects to your devices either through USB ports or wirelessly via NFC. It helps you protect your account from unauthorized access. When Advanced Protection is turned on, you must sign in to your account with a security key if you choose to use a password instead of a passkey. Order your hardware security keys.
Tip: If you create a passkey, you will bypass the second authentication step, since this verifies that you have possession of your device. If you would like to always use your password, you can change this default preference in your account settings.
If you still have account access:
- Get one or more replacement security keys.
- Go to your Google Account.
- On the left navigation panel, click Security.
- In the "How you sign in to Google" panel, click Passkeys and security keys.
- Click Add security key. Add your new security keys.
- Next to the lost security key, select Edit Remove this key.
If you don't have account access:
- Submit a request to recover your account. It takes a few days for Google to verify it’s you.
- While you wait, order one or more replacement security keys.
- You'll get an email to your recovery email address to let you know when you can access your account again. After you get that notification, sign in to your account.
- Turn on Advanced Protection again.
If you choose to use security keys, you should keep your security key with you any time you might need to sign in on a new device.
If you travel, bring your security key with you.
Questions about Google products
Can I still use Google products?You can still sign into apps and services with Google. If they request access to your Gmail or Drive data, access is denied.
Tip: You can give some supported apps access to your Gmail or Drive data.Yes, Nest works with Google Accounts, including accounts that are enrolled in the Advanced Protection Program. To help you manage all your Google Nest and Google Home devices, you can migrate your Nest Account to a Google Account.
For privacy-related info about Google Nest connected home devices and services, check these FAQs on privacy.
Share with other home members more securely
To help keep your Google Nest and Google Home devices secure, follow these tips:
- Only add home members you trust. Keep in mind that:
- Any home member can access devices, media services, addresses, and home activity.
- Home members can add new devices to your home.
- Home members can add or remove other home members, including you. Anytime a member is added to your home, all home members get an email notification.
- If your Google Account is enrolled in Advanced Protection, we strongly recommend that all home members enroll in Advanced Protection. That way, all home members are equally protected against unauthorized access to their Google Account and home devices or services.
Questions about non-Google services
Can I use non-Google apps & services or Apps Script with Advanced Protection?Most non-Google apps and services are blocked
Advanced Protection stops most non-Google apps and services from accessing data like your Google Drive and Gmail data. That way, your data is better protected against harmful or unsecure access.
After you turn on Advanced Protection, you can allow these apps and services to access your Google data:
- All Google apps and services
- Apple Mail, Calendar, and Contacts apps on iOS and macOS
- Mozilla Thunderbird
- Desktop email clients that access Gmail directly
Let non-Google Apps access your Google data
Apple apps on iOS
You can let some Apple apps access your Google Account data and Gmail. Make sure you're using the latest version of the app and follow the in app instructions to allow iOS to access your Google Account. You may need to sign into your Google Account during this process.
Mozilla Thunderbird
You can use Mozilla Thunderbird to access your Gmail. Make sure you’re using the latest version of Thunderbird (60.0 or up).
Apps Script may be blocked
If you're enrolled in Advanced Protection, Apps Script can be used. If scripts request access to certain data in your account, like emails, documents, or photos, they may be blocked.
You can use Advanced Protection with a Mac running macOS 10.5 or above. To add a security key, use the following steps:
- On your computer, go to System Preferences.
- Click Internet AccountGoogle.
- Follow the instructions to sign in.
How can I protect my Google Account from iCloud backup risks?
To prevent an Advanced Protection Program user’s Google Account from being compromised via an iCloud backup, we recommend iCloud users set up security keys on their iCloud account.
If you are an iOS device user and use iCloud for backups, iCloud backs up information and settings stored on your device. Your Google Account, browser cookies, passwords, and passkeys for any services you are signed into are included in this data. Advanced Protection Program users that restore a backup to a new device will also be signed in to their Google Account on the new device. This means if your iCloud account is ever compromised, an attacker may be able to use the backup to gain access to your Google Account.
Can third-party email clients get Google’s protection against harmful links?
Users with Google Accounts enrolled in Advanced Protection receive additional click-time protection against harmful links with some email clients.
Learn more about link protection.Questions about political campaigns
Can I increase protection during election season?
To further protect accounts at high risk during the election season, you can request enhanced security for your account here.
Tip: To help make political organizations more secure with Advanced Protection, we’ve partnered with Defending Digital Campaigns to provide Titan Security Keys at no charge. Contact Defending Digital Campaigns to check whether your team is eligible for keys at no charge.
Fix problems with Advanced Protection
Why won't my security key work with my Linux computer?To set up a Security Key on a computer running a Linux-based operating system, you may need to add a new udev rule.
- Go to this directory:
/etc/udev/rules.d
- Create a new file for your security key.
- Name your file.
- Example:
70-key.rules
.
- Example:
- In the new file, paste the instructions for your udev version. If you don’t know your udev version, run the command:
sudo udevadm --version
- Udev version 188 or higher:
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="18d1|096e", ATTRS{idProduct}=="5026|0858|085b", TAG+="uaccess"
- Udev version 187 or lower:
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="18d1", ATTRS{idProduct}=="5026", GROUP="plugdev", MODE="0660"
- Udev version 188 or higher:
- Save your file and run the command:
sudo udevadm control --reload-rules
Restart your computer and add a security key to your Google Account.
To send a suspicious file to be scanned, choose any option:
- Next to the filename, click Send.
- Next to the Send button, click Expand more Scan file.
- Click the filename. In the new pop-up window, click Send.
- Advanced Protection scans the file:
- If the file is dangerous, you get a message that Chrome blocked it. To delete the downloaded file, click Discard.
- If the file is determined to be safe, you can download it. To download the file, click Open now.
Continue a download that Chrome warned you about
- Click the filename.
- In the new pop-up window, click Open now.
You can turn off Advanced Protection in your Google Account.
- Go to the Security section of your Google Account using a device that’s already signed in.
- Under "Advanced Protection Program," select Unenroll.
- Follow the on-screen instructions to unenroll.
To sign in to your Android TV after you turn on Advanced Protection:
- Remove your Google Account from your Android TV.
- Add your Google Account to your Android TV again and choose the option to set up using a phone that's on the same Wi-Fi network.