Technologies

New iOS Login Tech Makes It Super Hard to Hack Your iCloud Account

Hardware security keys are the most secure way to lock down your online accounts. Just don’t lose the keys.

Apple now lets you protect your Apple ID and iCloud account with hardware security keys, a significant upgrade for those who want maximum protection from hackers, identity thieves, or snoops.

Hardware security keys are small physical devices that communicate with USB or Lightning ports or with NFC wireless data connections when you’re logging on to a device or in to an account. Because you must have keys in your possession to use them, they’re effective at thwarting hackers trying to reach your account remotely. And they won’t work on fake login sites, so they can thwart phishing attacks that try to fool you into typing your password onto a counterfeit website.

Support for the keys arrived Monday with iOS 16.3 and MacOS 13.2, and on Tuesday, Apple published details on how to use security keys with iPhones, iPads and Macs. The company requires you to set up at least two keys.

Apple has been working to tighten security in recent months, stung by iPhone breaches involving NSO Group’s Pegasus spyware. Apple’s Advanced Data Protection option arrived in December, giving a stronger encryption option to data stored and synced with iCloud. And in September, Apple added an iPhone Lockdown Mode that includes new guardrails on how your phone works to thwart outside attacks.

A big caveat, though: Although hardware security keys and the Advanced Data Protection program lock down your account better, they also mean Apple can’t help you recover access.

«This feature is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government,» Apple said in a statement. «This takes our two-factor authentication even further, preventing even an advanced attacker from obtaining a user’s second factor in a phishing scam.»

Industry tightens login security

The technology is part of an industrywide tightening of authentication procedures. Thousands of data breaches have shown the weaknesses of traditional passwords, and hackers now can thwart common two-factor authentication technologies like security codes sent by text message. Hardware security keys and another approach called passkeys offer peace of mind even when it comes to serious attacks like hackers gaining access to LastPass customers’ password manager files.

Hardware security keys have been around for years, but the Fast Identity Online, or FIDO, group has helped standardize the technology and integrate its use with websites and apps. One big advantage on the web is they’re linked to specific websites, for example Facebook or Twitter, so they thwart phishing attacks that try to get you to log in to fake websites. They’re the foundation for Google’s Advanced Protection Program, too, for those who want maximum security.

You need to pick the right hardware security keys for your devices. To communicate with relatively new models of both Macs and iPhones, a key that supports USB-C and NFC is a good option. Apple requires you to have two keys, but it isn’t a bad idea to have more in case you lose them. A single key can be used to authenticate to many different devices and services, like your Apple, Google and Microsoft accounts.

Yubico, the top maker of hardware security keys, announced on Tuesday two new FIDO-certified YubiKey models in its Security Key Series suited for consumers. They both support NFC, but the $29 model has a USB-C connector and the $25 model has an older style USB-A connector.

Google, Microsoft, Apple and other allies are also working to support a different FIDO authentication technology called passkeys. Passkeys are designed to replace passwords altogether, and they don’t require hardware security keys.

Technologies

Google, Meta and Amazon Join Global Pact to Fight Rising Online Scams

The companies will share fraud intelligence and coordinate responses as AI makes scams faster, cheaper and harder to detect.

Modern online scams operate across multiple platforms, perhaps spanning social media, messaging apps, email and online marketplaces. Google, Meta and Amazon are among 11 tech, retail and payments companies that have signed a new agreement to combat online scams by sharing threat intelligence across platforms, Axios first reported Monday.

The initiative, called the Industry Accord Against Online Scams & Fraud, is designed to improve how companies detect and respond to fraud that spans multiple services. Participants say they will exchange signals, such as scam-linked accounts and fraudulent domains, and coordinate enforcement actions.

By sharing intelligence in near real time, companies hope to identify these scams earlier and stop them before they spread.

The effort reflects how modern scams operate. A victim might encounter a fake celebrity investment ad on social media, move to a messaging app where the scammer builds trust, then faces prompts to send money through a fraudulent website, payment app or crypto wallet — spanning multiple companies’ ecosystems.

Google said it now blocks hundreds of millions of scam-related results every day using AI, underscoring how both attackers and defenders are increasingly relying on the same technology. Meta removed more than 159 million scam ads in 2025 and is expanding AI tools to detect impersonation and warn users.

Online scams are growing rapidly, in part because generative AI has lowered the barrier to entry. AI can be used not only to produce realistic phishing emails but also to clone voices and deepfake videos that impersonate executives, public figures and even family members.

The agreement is voluntary and doesn’t create new legal obligations, but it comes after regulators’ increased pressure on tech platforms to address fraud more aggressively. The companies say they will begin building frameworks for reporting and intelligence-sharing, though it’s not yet clear how quickly those systems will be deployed or how effective they will be in practice.

Technologies

Today’s NYT Mini Crossword Answers for Wednesday, March 18

Here are the answers for The New York Times Mini Crossword for March 18.

Looking for the most recent Mini Crossword answer? Click here for today’s Mini Crossword hints, as well as our daily answers and hints for The New York Times Wordle, Strands, Connections and Connections: Sports Edition puzzles.

Need some help with today’s Mini Crossword? I thought it was a fairly easy one, but read on for all the answers. And if you could use some hints and guidance for daily solving, check out our Mini Crossword tips.

If you’re looking for today’s Wordle, Connections, Connections: Sports Edition and Strands answers, you can visit CNET’s NYT puzzle hints page.

Read more: Tips and Tricks for Solving The New York Times Mini Crossword

Let’s get to those Mini Crossword clues and answers.

Mini across clues and answers

1A clue: Word before «card,» flood» or «photography»
Answer: FLASH

6A clue: Joust weapon
Answer: LANCE

7A clue: Brain, heart or lungs
Answer: ORGAN

8A clue: «Frozen» reindeer
Answer: SVEN

9A clue: What can be found on frozen roads or frozen margaritas
Answer: SALT

Mini down clues and answers

1D clue: Follow a dentist’s recommendation
Answer: FLOSS

2D clue: Baby bug
Answer: LARVA

3D clue: Shape made in the snow
Answer: ANGEL

4D clue: Very little
Answer: SCANT

5D clue: Egg layer
Answer: HEN

Technologies

Amazon Speeds Up Delivery Even More With 1- and 3-Hour Options

The retailer says the one-hour option is available in hundreds of cities, with discounted shipping for Prime members.

Same-day delivery apparently isn’t fast enough for some Amazon shoppers. The retail giant said on Tuesday it’s adding new shipping options that will get products to front doors within a one- or three-hour window.

The company said in its announcement that the one-hour option is available in hundreds of cities across the US, while the three-hour option is now live in more than 2,000 areas. Amazon’s web page at amazon.com/getitfast shows whether those options are available to shoppers for their location. More than 90,000 products will be available for those shipping windows, the company said.

For those who can’t get those services (including the author of this post, who lives between Austin and San Antonio in Texas), a message will display: «3-hour delivery is currently unavailable. Check back at a later time or shop products with Same-Day delivery below.»

Pricing for the faster delivery options is not cheap: It’ll cost you $20 for one-hour delivery and $15 for three-hour delivery for those without an Amazon Prime account, or $10 and $5 for customers who subscribe to Prime.

Last year, the company rolled out faster Amazon delivery options to 4,000 additional areas.

In a video of the podcast Learn and Be Curious with Doug Herrington, hosted by Amazon’s CEO of worldwide stores, Kandace Kapps, the director of the company’s same-day strategy team, spoke in more detail about the challenges of fast shipping. Kapps discussed shifts in customer buying habits over the last few years, such as more people buying household essentials like toilet paper on Amazon.

She said that Amazon can deliver so quickly by placing same-day delivery hubs close to customers in metro areas and by getting products ready to ship within 15 minutes, aided by warehouse robots.

«I think customers are going to continue to get magically surprised by how fast we can deliver to their doorstop,» Kapps said.

Herrington said fast shipping increases sales: «When we speed up the service, the probability that somebody buys a product from us goes up.»

Other retailers, including Walmart, have been adding same-day delivery options or exploring other ways to speed up shipping times to compete with Amazon.

Removing buyers’ moments of hesitation

Part of Amazon’s strategy, which has involved a massive buildout of locations, deployment of thousands of trucks, deals with other delivery services and investment in logistics software, is actually pretty simple: being there when people need last-minute items or make impulse buys.

«It’s about removing the last moment where you would’ve reconsidered the purchase,» said Stephanie Carls, retail insights expert at coupon and promotional-code website RetailMeNot, a sibling site of CNET. «It changes how you shop, not just how fast you get things.»

Carls said that Amazon’s super-fast delivery is removing the timeframe when people might change their minds about a purchase.

«There used to be a gap between deciding to buy something and actually having it. That’s when you’d price check, rethink it, or decide you didn’t need it after all,» she said. «This closes that gap.»

The retail expert said that competitors, including Walmart and Target, have been speeding up delivery times in some markets. Still, they’re not matching Amazon’s scale or product range at those speeds or levels of consistency.

«And that’s what starts to make everyone else feel slow,» Carls said. «Amazon’s advantage is how tightly connected its technology, inventory and delivery networks are, which makes this level of speed more repeatable.»