

When signing in from a platform that doesn’t support security keys-for example, any browser on an iPhone, Microsoft Edge on a Windows PC, or Safari on a Mac-you’ll still be able to authenticate the old fashioned way, with a code sent to your phone. (Opera also supports U2F security keys, since it’s based on Google Chrome.) Mozilla Firefox now includes U2F support, but it’s disable by default and must be enabled with a hidden option at the moment.


Continue reading for our pick of the best security key to use.RELATED: U2F Explained: How Google and Other Companies Are Creating a Universal Security Token While they’re undoubtedly dependable, not all security keys are created equal.

GitHub and, in addition to the UK government. Developed by Google and security company Yubico (opens in new tab), U2F today protects several recognizable internet companies – including Facebook, Gmail, and Dropbox. They’re inexpensive and available in various connection types and standards, including USB-A, USB-C, Bluetooth, and NFC. Security keys are based on the FIDO U2F Open authentication standard. Once inserted into a computer or mobile device grants the user instant access to services using a button or keypad – and this can offer a higher grade of security (opens in new tab) without waiting for a code to be beamed to a device. While these are fine (and better than no 2FA system), physical hardware-based security keys, like the ones featured here, are so much better. You've probably seen standard software-based 2FA systems (opens in new tab) that send you a text message or email to confirm your identity.
