-
@Ethan_Heilman @matthew_d_green @Allan_Wirth @Google Yes, security keys are better all around, simply because of the strong binding of authenticating host (domain) and the key used. That is, confusion/phishing attempts are mitigated pretty thoroughly. Active login prompts I see as complementary to the actual authentication method.