You no longer need to enter your phone number to activate two-factor authentication. Google is adding two new step methods: through an authenticator app or with a hardware security key.

Google is simplifying the process of setting up two-factor authentication (2FA). Users can now add a second step method to their account: an authenticator app or a hardware security key. Previously, users had to use the less secure SMS authentication to enable 2FA. The changes are rolling out to all Workspace users and users with a personal Google account.

Two ways

Users had to set up their 2FA based on SMS verification. Since this is a less secure method, Google is expanding the options for enabling 2FA. Google describes two ways users can add an additional step method to their account. The first method is through an authentication app like Microsoft Authenticator, which uses a time-based passcode that must be entered into the app.

A second method is to use a hardware security key, which can be assigned in two ways: by associating the security key with a FIDO1 credential on the hardware key or by assigning a passkey.

Google will roll out the changes to all Workspace users and people with a personal Google Account.