Skip to main content
US flag An official website of the United States government


Does using a security key mean I’m completely safe from phishing?

Adding a security key to your account and consistently using it to log in will dramatically increase your safety from phishing attacks.

However, your account may have other two-factor methods enabled, and provides all users a recovery key, any of which could also be used to gain access to your account.

If you have a security key enabled, will ask you to use it first, every time you log in. If you are not asked to use a security key during the login process, this could be a warning that you are not at the real website. To stay safe when using, expect to use your security key consistently to log in.