MFA Everywhere: Hardware Keys for Every Employee
Every employee now gets two YubiKeys, and SMS codes are no longer accepted as a second factor.
With version 4.0 of our IT security guidelines, multi-factor authentication is mandatory for every company account, from Google Workspace to the HR portal.
Two keys per person
Every employee receives two YubiKey 5 hardware keys: one for daily use and one as a backup kept at home. Hardware keys cannot be phished the way one-time codes can, which makes them our preferred second factor.
Authenticator apps remain allowed as a fallback. SMS codes are no longer accepted, because SIM swapping attacks have become too common.
Lost a key?
Report a lost key to it-support@example.com within 24 hours. You can keep working with your backup key in the meantime, and IT will send a replacement.