In what way? For its employees, it uses physical keys: https://krebsonsecurity.com/2018/07/google-security-keys-neutralized-employee-phishing/ https://krebsons

In what way? For its employees, it uses physical keys: https://krebsonsecurity.com/2018/07/google-security-keys-neutralized-employee-phishing/ https://krebsonsecurity.com/2018/07/google-security-keys-neu... Consumer/enterprise Google accounts have supported U2F and the Google Authenticator app for quite some time. I have SMS completely eliminated as a factor on my GMail account (Yubikey primary with codes from the app as a fallback; no way to authenticate via SMS at all).