That's not at all accurate for Google accounts. It's also one of the few sites allowing you to only have security keys as the 2nd factor authentication method.
It doesn't force you to have weaker options. Advanced Protection disables weaker options than security keys altogether.
Conversation
This Tweet is from a suspended account. Learn more
If you're technical and don't want to have customer support able to recover the account for you then landing.google.com/advancedprotec is the best way to enable 2-factor authentication. You need to have at least 2 security keys and can't use other weaker 2 factor authentication methods.
2
This Tweet is from a suspended account. Learn more
Advanced Protection Program is more than 2FA and is something that isn't offered by other sites.
I can't see the normal UI because I have it enabled. It only allows me to add security keys not other mechanisms like app-based, SMS, recovery codes, Google prompt, etc.
1
1
This Tweet is from a suspended account. Learn more
Just be aware the Advanced Protection Program is a lot more than only being able to login via security keys. It also prevents granting arbitrary apps access to account data and you don't have the option of using app passwords for legacy apps without modern auth workflow, etc.
1
1
This Tweet is from a suspended account. Learn more
I'm suggesting using it for further security beyond simply using 2FA. You can set up 2FA without SMS without Advanced Protection.
Advanced Protection is largely about getting rid of the customer support backdoors and eliminating other ways around proper authentication like that.
1
This Tweet is from a suspended account. Learn more
That's the workflow they have for non-technical people aimed at minimizing the amount of people recovering accounts via customer support.
I'm fairly sure you can enable non-SMS 2FA without that even without Advanced Protection. I don't think I ever had SMS recovery/2FA enabled.
The issue is that they have at least 3 workflows: the one for non-technical users, a more hidden way for people to set things up in a more specific way and then Advanced Protection Program for journalists, activists, etc. or other people with accounts that are high risk.
1
1
This Tweet is from a suspended account. Learn more
Show replies