Whenever you log into Gmail from a phone for the first time, you will need to enter your password and the code from your authenticator app. You will only need to use your hardware key with that occasionally if you log out of that account and and then need to log back in. If you trust the computer you’re signed into, you can have your account remember you (this is usually the default). Whenever you log into your Gmail account on a laptop computer **for the first time, you will need to enter both your **password and your security key (yubikey). When you’re done, you should have 2 security keys and the authenticator app listed under “Your second step.” How will this affect my day to day? Select “Authenticator app” and follow the instructions when prompted.ĭownload Google Authenticator from the Android app store or the Apple app store. Now, scroll down to the section labeled “Set up alternative second step” You should now see both keys under “Your second step”: Name it something like MAINĪdd your second security key. Select Security Key, and follow the instructions for adding a security key. Text message isn’t a very secure form of authentication, so we’re going to use something better. You may see a screen asking you to update your backup number and email. Next, under Sign-in & Security, select “Signing in to Google” Then click on the circle in the top right of your browser, and click on “Google Account”. If your computer has usb-c ports, like the newer macbooks do, then you might want to get one usb-a and one usb-c yubikey. If your computer has normal USB ports, you can buy two of the blue yubikeys for $20 each on Amazon. One is a backup to leave at home in a secure place, and one is to carry with you. These two keys can each be used as a second factor to access your account. Your authenticator code from an Authenticator app on your phoneīuy two security keys (yubikeys). (This program requires you to only use security keys for 2FA and currently only works in the chrome browser).Īfter you complete this tutorial, in order to access your account for the first time on any device, you will need both your password and one of the following: This is the highest form of Gmail security unless you want to go all the way and sign up for Google’s Advanced Protection program. This tutorial explains how to configure your account with two security keys and an authenticator app. Using Yubikeys as your Gmail second factor

Gmail yubikey