6 ms·

I went through the Google Advanced Protection setup a few weeks ago. My only advice is that if you use Android, download the Smart Lock app before enabling Adva

I went through the Google Advanced Protection setup a few weeks ago. My only advice is that if you use Android, download the Smart Lock app before enabling Advanced Protection. If you don’t, you’ll get signed out of your Google account on your phone without a way to log back in (the Play Store won’t work without a linked Google account). If you make this mistake, you need to then disable Advanced Protection, re-login to your phone, then download the Smart Lock app, and THEN re-enable Advanced Protection to get things working. Otherwise you’ll be locked out of your phone.

anilakar 8y ago
I've been looking for a new Android phone for a while now, and my primary selection criterion has become NFC because advanced account protection uses U2F over it. It's frustrating when otherwise decent products are unusable due to the lack of a common feature.
- blfr 8y ago
  I carefully chose a phone supporting NFC as well. But then installed LineageOS and, as it turns out, it now does not pass Google's SafetyNet test and Google Pay refuses to work. Does the phone need to pass SafetyNet to use a Yubikey over NFC with it?
  - yolo1897 8y ago
    it work fine just use magisk to pass safety net and in Hide panel check google pay. i'm using it everyday
- izacus 8y ago
  New Pixels now have the hardware built-in so you don't need a separate Yubikey anymore.
- ecesena 8y ago
  U2F also works over usb on Android. Not sure it's very usable, but it works.
tokyodude 8y ago
How will you be able to setup a new phone then? Let's say next year you buy a phone. Will you have to disable advanced protection on you account to add the phone to your account?
- gst 8y ago
  Most phones nowadays support NFC so this shouldn't be an issue. Just use your NFC key to log into the phone. Alternatively you can also use a Bluetooth U2F key instead of a NFC key. Both of those keys have a regular USB port in addition to NFC/Bluetooth so you can set them up on your laptop and then use them with your phone.
  - tialaramex 8y ago
    On my Pixel 2 you can (though not conveniently) plug a typical USB-A Security Key into the USB-C port via an adaptor and of course it just works. I enrolled a key this way (USB-A key plugged into an adaptor on the USB-C port) once just to see if it works. Bizarrely Google will let you do that, but, having proved that it works, they then immediately tell you that you need to install Desktop Chrome before you can enroll any other keys. No idea why they think that's a good idea let alone necessary.

anilakar 8y ago

I've been looking for a new Android phone for a while now, and my primary selection criterion has become NFC because advanced account protection uses U2F over it. It's frustrating when otherwise decent products are unusable due to the lack of a common feature.

blfr 8y ago
I carefully chose a phone supporting NFC as well. But then installed LineageOS and, as it turns out, it now does not pass Google's SafetyNet test and Google Pay refuses to work. Does the phone need to pass SafetyNet to use a Yubikey over NFC with it?
- yolo1897 8y ago
  it work fine just use magisk to pass safety net and in Hide panel check google pay. i'm using it everyday
izacus 8y ago
New Pixels now have the hardware built-in so you don't need a separate Yubikey anymore.
ecesena 8y ago
U2F also works over usb on Android. Not sure it's very usable, but it works.

tokyodude 8y ago

How will you be able to setup a new phone then? Let's say next year you buy a phone. Will you have to disable advanced protection on you account to add the phone to your account?

gst 8y ago
Most phones nowadays support NFC so this shouldn't be an issue. Just use your NFC key to log into the phone. Alternatively you can also use a Bluetooth U2F key instead of a NFC key. Both of those keys have a regular USB port in addition to NFC/Bluetooth so you can set them up on your laptop and then use them with your phone.
- tialaramex 8y ago
  On my Pixel 2 you can (though not conveniently) plug a typical USB-A Security Key into the USB-C port via an adaptor and of course it just works. I enrolled a key this way (USB-A key plugged into an adaptor on the USB-C port) once just to see if it works. Bizarrely Google will let you do that, but, having proved that it works, they then immediately tell you that you need to install Desktop Chrome before you can enroll any other keys. No idea why they think that's a good idea let alone necessary.