Google has added support for physical security keys as a login option for Windows devices in Google Workspace, giving businesses a stronger way to protect staff accounts.

• What it is: Google Credential Provider for Windows (GCPW) now supports FIDO2-compliant physical security keys as a second factor when staff sign in to Windows.
• Who is affected: Google Workspace businesses using GCPW to manage Windows sign-in, with the feature rolling out from 20 July 2026 for Rapid Release domains.
• Why it matters: Physical security keys are harder for attackers to bypass than SMS codes or authenticator apps, reducing the risk of compromised staff accounts.
• What to do: If your business relies on shared or high-risk accounts, such as finance or admin, consider whether hardware security keys are a good fit for those staff.

We recommend reviewing your current two-step verification setup with your IT provider to see if this option strengthens your account security.