iPhones Can Now Be Used to Generate 2FA Security Keys for Google Accounts - MacRumors
Skip to Content

iPhones Can Now Be Used to Generate 2FA Security Keys for Google Accounts

by

google smart lock app iconA new update to Google's Smart Lock iOS app lets users set up their iPhone or iPad as a security key for two-factor authentication when signing into native Google services via Chrome browser.

Once the feature is set up in the app, attempting to log in to a Google service via Chrome on another device such as a laptop results in a push notification being sent to their iOS device.

The user then has to unlock their iPhone or ‌iPad‌ using Face ID or Touch ID and confirm the log-in attempt via the Smart Lock app before it can complete on the other device.

After installing the update, users are asked to select a Google account to set up their phone's built-in security key. According to a Google cryptographer, the feature makes use of Apple's Secure Enclave hardware, which securely stores ‌Touch ID‌, ‌Face ID‌, and other cryptographic data on iOS devices.

The Smart Lock app requires that Bluetooth is enabled on both the iPhone/‌iPad‌ and the other device for two-factor authentication to work, so they have to be in close proximity, but the advantage of the system is that it ensures the process is localized and can't be leaked onto the internet.

The Google Smart Lock app is a free download for iPhone and ‌iPad‌ on the App Store. [Direct Link]

(Via 9to5Google.com)

Top Rated Comments

89 months ago

Can someone explain the functional difference between the 'Google'-app I have on my iPhone, which prompts me to verify it's me whenever I login to any Google-services?
The way I am reading this, is that it eliminates the push from Google and handles everything locally. When you attempt to sign-in, Chrome will check for the presence of your trusted device (iPhone) via local Bluetooth and prompt you directly. This, in theory, eliminates any chance for a bad actor intercepting the internet based push notification.
Score: 3 Votes (Like | Disagree)
Westside guy Avatar
89 months ago
There are also standard ways to do two-factor auth, one of which is even implemented by Google through their Google Authenticator app (RFC 6238 time-based one-time passwords - I prefer the OTP Auth app for it) and can be implemented by any app developer for increased security without having to be beholden to Google or any other single entity. I realize some people will complain about having to copy 6 digits (oh the horror), but I prefer standard solutions like that to tying my security to Google - or, for that matter, to having all these vendor-specific two-factor approaches (Apple does it one way, Google does it another, etc.).
Score: 2 Votes (Like | Disagree)
Vincent Verbist Avatar
89 months ago

The way I am reading this, is that it eliminates the push from Google and handles everything locally. When you attempt to sign-in, Chrome will check for the presence of your trusted device (iPhone) via local Bluetooth and prompt you directly. This, in theory, eliminates any chance for a bad actor intercepting the internet based push notification.
Okay, that's something I can understand, but still strange that there is not a single reference to the current solution through the Google app...
Score: 1 Votes (Like | Disagree)
89 months ago

The way I am reading this, is that it eliminates the push from Google and handles everything locally. When you attempt to sign-in, Chrome will check for the presence of your trusted device (iPhone) via local Bluetooth and prompt you directly. This, in theory, eliminates any chance for a bad actor intercepting the internet based push notification.
You would think that is incredibly hard already to crack/spoof an Apple push notification from the Google app itself; far more than SMS. I dont know that this new way offers much more to the average person. In a very high security environment using Goole Apps (not sure why you would do that to begin with then, but ok) I guess.

Its also unclear how not needing an internet connection would help if you are logging into Google which requires internet. That argument doesnt make a ton of sense obviously.

Not knocking more options, its just a bit unclear the differences between this and using the Google app to authenticate 2FA.
Score: 1 Votes (Like | Disagree)
Vincent Verbist Avatar
89 months ago
Can someone explain the functional difference between the 'Google'-app I have on my iPhone, which prompts me to verify it's me whenever I login to any Google-services?
Score: 1 Votes (Like | Disagree)

Popular Stories

Google maps feaure

Google Maps Updated to Fully Support iPhone Duo Displays

Wednesday November 4, 2026 4:24 am PST by
Google Maps has been updated with improved support for the iPhone Duo's displays, so that the app now fills the foldable iPhone's inner and outer screens rather than leaving unused space along the edge. The change comes with version 26.44.4, which is available on the App Store. Google doesn't mention Duo-specific changes in its release notes, but the updated support is plainly visible....
General App Store South Korea Feature Feature

South Korea Rules Against Apple Over App Store Payment Rules

Wednesday October 28, 2026 9:00 am PDT by
South Korea has fined Apple 20.8 billion won ($15.5 million) and ordered it to let developers link to external payment options from their apps, The Associated Press reports. The Korea Media and Communications Commission found that Apple and Google effectively require developers to use their payment systems, violating a 2021 law intended to allow alternatives. Google was fined 42.9 billion...
iOS 28 AI

Apple Taking New Approach to Developing iOS 28 and macOS 28

Sunday November 8, 2026 7:42 am PST by
Apple has made a change to its development process for iOS 28, macOS 28, and corresponding software updates, according to Bloomberg's Mark Gurman. In his Power On newsletter today, he said Apple separates development of each year's new operating systems into three major stages. Typically, he said each stage consists of four weeks of coding followed by a four-week "convergence" period where...
Latest Stories
Here's What Apple Fixed in iOS 27.2.1 and macOS 27.2.1
Here's What Apple Fixed in iOS 27.2.1 and macOS 27.2.1
9 hours ago
Webex Gets iPhone Duo Support
Webex Gets iPhone Duo Support
10 hours ago
Meta's Muse AI Agent Comes to Apple Watch
Meta's Muse AI Agent Comes to Apple Watch
10 hours ago
Anker Launches Eufy Security Cam With Auto-Tracking Light
Anker Launches Eufy Security Cam With Auto-Tracking Light
10 hours ago
macOS 27.2.1 Fixes eMudhra Certificate Flaw in Command-Line Tools
macOS 27.2.1 Fixes eMudhra Certificate Flaw in Command-Line Tools
12 hours ago
Anthropic Launches Claude Fable 5.2 and Mythos 5.2
Anthropic Launches Claude Fable 5.2 and Mythos 5.2
12 hours ago
Apple Releases macOS Golden Gate 27.2.1
Apple Releases macOS Golden Gate 27.2.1
14 hours ago
Apple Releases iOS 27.2.1 With Bug Fixes
Apple Releases iOS 27.2.1 With Bug Fixes
14 hours ago
Apple Releases watchOS 27.2.1 and visionOS 27.2.1 With Security Fixes
Apple Releases watchOS 27.2.1 and visionOS 27.2.1 With Security Fixes
14 hours ago
Apple Watch Ultra 4 Gets $99 Amazon Discounts, Starting at $699.99
Apple Watch Ultra 4 Gets $99 Amazon Discounts, Starting at $699.99
14 hours ago
Apple Pay Ad Features Martial Arts Convenience Store Food Fight
Apple Pay Ad Features Martial Arts Convenience Store Food Fight
14 hours ago
Apple Continues to Say Some AI Features Will Have Fees for Extra Usage
Apple Continues to Say Some AI Features Will Have Fees for Extra Usage
14 hours ago
Apple Announces Türkiye Expansion Plans as Tim Cook Visits
Apple Announces Türkiye Expansion Plans as Tim Cook Visits
16 hours ago
Singapore Saved Apple $2.7 Billion in Taxes This Year
Singapore Saved Apple $2.7 Billion in Taxes This Year
16 hours ago
Apple Music's 2026 Artist of the Year is Olivia Dean
Apple Music's 2026 Artist of the Year is Olivia Dean
16 hours ago
This Could Be Your Last Chance to Pre-Order the HomeView at a Discount
This Could Be Your Last Chance to Pre-Order the HomeView at a Discount
16 hours ago
Some HomePod Mini 2 Buyers Returning Units Over Mac Speaker Issues
Some HomePod Mini 2 Buyers Returning Units Over Mac Speaker Issues
16 hours ago
MacBook Pro With PROLED XDR Display: Details You Might Have Missed
MacBook Pro With PROLED XDR Display: Details You Might Have Missed
17 hours ago
Satechi Offers MacRumors Readers 30% Off Select Accessories in Early Black Friday Sale
Satechi Offers MacRumors Readers 30% Off Select Accessories in Early Black Friday Sale
17 hours ago
Leaker Envisions a Shorter iPhone With a New iOS Layout
Leaker Envisions a Shorter iPhone With a New iOS Layout
17 hours ago
Apple to Give You More Control Over When Your Mac Passwords Lock
Apple to Give You More Control Over When Your Mac Passwords Lock
18 hours ago
Siri Is Getting a Better Memory
Siri Is Getting a Better Memory
19 hours ago
iPhone 18e Could Feature Bigger Display and Battery
iPhone 18e Could Feature Bigger Display and Battery
19 hours ago
Apple's Siri Boss May Leave - Here's Who Could Take Over
Apple's Siri Boss May Leave - Here's Who Could Take Over
20 hours ago
Apple Launching Two More New Products This Friday
Apple Launching Two More New Products This Friday
20 hours ago
Apple Store Subscription Sign-Up Controversy Exposed
Apple Store Subscription Sign-Up Controversy Exposed
1 day ago
Siri AI Rumored to Become 'More Like an Agent' as Early as Next Year
Siri AI Rumored to Become 'More Like an Agent' as Early as Next Year
2 days ago
Apple Taking New Approach to Developing iOS 28 and macOS 28
Apple Taking New Approach to Developing iOS 28 and macOS 28
2 days ago
Early Apple Black Friday Deals on Apple Watch, MacBook Air, and More
Early Apple Black Friday Deals on Apple Watch, MacBook Air, and More
2 days ago
'Backglow' Lets You Customize New MacBook Pro's Glowing Apple Logo
'Backglow' Lets You Customize New MacBook Pro's Glowing Apple Logo
2 days ago