Common questions about Advanced Protection Program.

People whose accounts contain particularly valuable files or sensitive information should consider Advanced Protection. Google strongly recommends that journalists, activists, business executives, and people involved in elections enroll.

If you’re at high risk for targeted online attacks, we recommend enrolling both your work and personal accounts, and possibly even your family members’ accounts.

If you have a Google Workspace Account (an organizational Google Account) you can enroll it individually with admin approval. Start the enrollment process to see if your admin has already enabled Advanced Protection. If not, speak to your admin directly.

Yes. In fact, we recommend enrolling all of the accounts in any organization that might be targeted, such as a campaign; a political, journalist, or activist group; or an election-related organization.

The Advanced Protection Program is a free service.

In order to enroll, you can use a passkey on your personal device or you can purchase a security key. You’ll also need to add recovery options to avoid getting locked out.

You’ll need at least one passkey or FIDO compliant security key, like Google’s Titan Security Key, when you enroll and sign in to your Google Account. You have the option to enroll with any of following configurations as your primary and secondary security factors: 

• 2 passkeys or security keys
• 1 passkey and 1 security key
• 1 passkey or security key, and recovery options, like a recovery phone and email

If you’re part of a federal campaign, you may qualify for a free Google Titan Security Key. Google has partnered with Defending Digital Campaigns (DDC) to help safeguard campaign accounts, and make it easier for campaigns to enroll in Advanced Protection. Check your eligibility.

Yes. Add an email and phone number to your Google Account, so it’s easy to recover if you get locked out.

Most of your day-to-day account activity will not feel different.

• The biggest change will be that your passkey or your security key will be required when you sign in to your account.
• You may find you receive more alerts or warnings before downloading a file or installing an app. Strong protections against malware are built into all Google products, such as Google Play Store and Google Chrome, but Advanced Protection performs even more stringent checks.
• A number of account security features that were optional will be automatically turned on and kept on for your account.

Passkeys are the simplest and most secure way to sign in to your Google Account, verifying it’s you with just your fingerprint, face scan or screen lock — no password needed. Passkeys can never be guessed or reused, helping keep your private information secure against attackers. Passkeys can also be created on FIDO 2 compliant physical security keys.

You’ll need at least one passkey or one security key set up on your account to enroll in Advanced Protection.

Advanced Protection requires an external physical security key when you sign in to your account on a new device, just as you would have for your house or car. Accounts that require keys are much safer from attacks than accounts that only require a password. Without having your actual key in their possession, hackers are unable to gain access even if they know your password.

You’ll need at least one security key to enroll in Advanced Protection, and we strongly recommend adding a second key as a backup during, or very soon after enrollment.

Types of keys

There are many kinds of external keys. You might plug a USB key into your device, keep a Bluetooth key nearby, or hold an NFC key close to your phone when you sign in.

You can purchase Google’s Titan Security Key or any key that supports the FIDO^® open standard. You’ll also have an opportunity to view recommended keys during enrollment.

You’ll need your passkey or your security key to sign in to your Google Account. Remember to bring your passkey (which is on your device) or your security key with you when you travel.

If you lose your passkey or security key and are still signed in on one of your devices, visit account.google.com to add or replace a key. Otherwise, submit a request to recover your account. Google may take a few days to verify it’s you and restore your access.

To further protect accounts at a high risk of attacks during the U.S. election season, you can request enhanced security for your account here.

To make political organizations safer with Advanced Protection, we’ve partnered with Defending Digital Campaigns to provide free Titan Security Keys. See if your team is eligible for free keys.