Skip to main content
US flag An official website of the United States government

Help

Does using a security key mean I’m completely safe from phishing?

Adding a security key to your login.gov account and consistently using it to log in will dramatically increase your safety from phishing attacks.

However, your account may have other two-factor methods enabled, and login.gov provides all users a recovery key, any of which could also be used to gain access to your account.

If you have a security key enabled, login.gov will ask you to use it first, every time you log in. If you are not asked to use a security key during the login process, this could be a warning that you are not at the real login.gov website. To stay safe when using login.gov, expect to use your security key consistently to log in.