Google
UX lead, Advanced Protection

Advanced Protection

Your wallet should not determine your security. I lead UX for Google's Advanced Protection Program, designing enrollment for people at higher risk of targeted attacks.

I shaped the path around passkeys, security keys, and recovery readiness. The constraint was to remove the need for a separate hardware purchase without leaving people unprepared for losing their usual device.

Advanced Protection introduction explaining the program's account safeguards
The program introduction establishes who the protection is for and what it offers

Problem & constraint

Remove a purchase, not a safeguard

A physical security key can be difficult to buy or obtain, especially when someone needs protection urgently. The passkey path lets eligible people use a compatible device they already own. It lowers that barrier; it does not remove device compatibility or recovery requirements.

Decision & evaluation

Plan for the day the usual device is unavailable

I kept recovery preparation in the enrollment journey. Fewer steps were not the only goal: someone enrolling with a passkey still needed another way back if their usual device was lost.

With product, engineering, and security partners, I worked through supported credentials, recovery requirements, and the explanations for each state. That review connected each enrollment state to the safeguards it needed.

Advanced Protection enrollment checklist for passkeys or security keys, recovery phone, and recovery email
Readiness before enrollment. This design example groups credentials, recovery phone, and recovery email above the enrollment action. The configured-state indicators make preparation visible. Available options depend on the account and device.

Outcome

Protection without a separate hardware purchase

In July 2024, Google introduced passkey enrollment for Advanced Protection. People with compatible devices could join without first acquiring a physical security key, while recovery setup remained part of the flow.

The public announcement establishes that product change.

Public record

Explore the launch

Continue exploring2-Step Verification: making protection the starting point