Google employees are now using a physical USB key to log on to their devices and, according to Krebs on Security, none “of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes.”