A u2f key protects you better from phishing, but unfortunately the number of sites that support it is very limited. Luckily it includes google and facebook, so

A u2f key protects you better from phishing, but unfortunately the number of sites that support it is very limited. Luckily it includes google and facebook, so you can harden these two, and use social login where u2f isn't supported. As for the security key, you should check the support for your devices, ios is generally more problematic (keep in mind that even if you have an android phone, but you have an ipad, you prob need support for ios too). I wrote a blog post about this a while ago: https://medium.com/@0x0ece/googles-advanced-protection-program-with-iphone-and-ipad-5f30802885e7 https://medium.com/@0x0ece/googles-advanced-protection-progr...