Google has rolled out support for physical security keys as a login option for Windows devices managed through Google Workspace.

• What it is: The Google Credential Provider for Windows now supports FIDO2-compliant hardware security keys as a second factor when staff log into their Windows device, alongside the option to use a nearby phone via Bluetooth.
• Who is affected: Businesses using Google Workspace to manage staff logins on Windows PCs, particularly those wanting stronger protection than SMS codes or authenticator apps.
• What the benefit is: Hardware keys are harder to phish than one-time codes, reducing the risk of an attacker getting into a staff account even if a password is stolen.
• What action is needed: No immediate action is required, but businesses wanting stronger login security should ask us about enabling this option for staff.

This is a good opportunity to review whether your current login security matches the sensitivity of the data your staff can access.