Technologies

New iOS Login Tech Makes It Super Hard to Hack Your iCloud Account

Hardware security keys are the most secure way to lock down your online accounts. Just don’t lose the keys.

Apple now lets you protect your Apple ID and iCloud account with hardware security keys, a significant upgrade for those who want maximum protection from hackers, identity thieves, or snoops.

Hardware security keys are small physical devices that communicate with USB or Lightning ports or with NFC wireless data connections when you’re logging on to a device or in to an account. Because you must have keys in your possession to use them, they’re effective at thwarting hackers trying to reach your account remotely. And they won’t work on fake login sites, so they can thwart phishing attacks that try to fool you into typing your password onto a counterfeit website.

Support for the keys arrived Monday with iOS 16.3 and MacOS 13.2, and on Tuesday, Apple published details on how to use security keys with iPhones, iPads and Macs. The company requires you to set up at least two keys.

Apple has been working to tighten security in recent months, stung by iPhone breaches involving NSO Group’s Pegasus spyware. Apple’s Advanced Data Protection option arrived in December, giving a stronger encryption option to data stored and synced with iCloud. And in September, Apple added an iPhone Lockdown Mode that includes new guardrails on how your phone works to thwart outside attacks.

A big caveat, though: Although hardware security keys and the Advanced Data Protection program lock down your account better, they also mean Apple can’t help you recover access.

«This feature is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government,» Apple said in a statement. «This takes our two-factor authentication even further, preventing even an advanced attacker from obtaining a user’s second factor in a phishing scam.»

Industry tightens login security

The technology is part of an industrywide tightening of authentication procedures. Thousands of data breaches have shown the weaknesses of traditional passwords, and hackers now can thwart common two-factor authentication technologies like security codes sent by text message. Hardware security keys and another approach called passkeys offer peace of mind even when it comes to serious attacks like hackers gaining access to LastPass customers’ password manager files.

Hardware security keys have been around for years, but the Fast Identity Online, or FIDO, group has helped standardize the technology and integrate its use with websites and apps. One big advantage on the web is they’re linked to specific websites, for example Facebook or Twitter, so they thwart phishing attacks that try to get you to log in to fake websites. They’re the foundation for Google’s Advanced Protection Program, too, for those who want maximum security.

You need to pick the right hardware security keys for your devices. To communicate with relatively new models of both Macs and iPhones, a key that supports USB-C and NFC is a good option. Apple requires you to have two keys, but it isn’t a bad idea to have more in case you lose them. A single key can be used to authenticate to many different devices and services, like your Apple, Google and Microsoft accounts.

Yubico, the top maker of hardware security keys, announced on Tuesday two new FIDO-certified YubiKey models in its Security Key Series suited for consumers. They both support NFC, but the $29 model has a USB-C connector and the $25 model has an older style USB-A connector.

Google, Microsoft, Apple and other allies are also working to support a different FIDO authentication technology called passkeys. Passkeys are designed to replace passwords altogether, and they don’t require hardware security keys.

Technologies

Google I/O 2025: How to Watch and What to Expect

With Android 16 out of the way, Google I/O will certainly be all about AI.

Google I/O 2025 takes place on May 20 and 21 with Google’s big keynote happening on day 1. We expect Big G to talk about its myriad innovations across its ever-expanding portfolio of products — almost certainly with a huge focus on AI every step of the way. If we collectively cross our fingers, promise to be good and eat all our vegetables then we may even be treated to a sneak peek at upcoming hardware.

Read more: Android 16: Everything Google Announced at the Android Show

Google also hosted a totally separate event that focused solely on Android. The Android Show: I/O Edition saw the wrappers come off Android 16, with insights into the new Material 3 Expressive interface, updates to security and a focus on Gemini and how it’ll work on a variety of other devices.

By breaking out Android news into its own virtual event, Google frees itself to spend more time during the I/O keynote to talk about Gemini, Deep Mind, Android XR and Project Astra. It’s going to be a jam-packed event, so here’s how you can watch I/O 2025 as it happens and what you can look forward to.

Google I/O: Where to watch

Google I/O proper kicks off with a keynote taking place on May 20, 10 a.m. PDT (1 p.m. EDT, 6 p.m. BST). It’ll almost certainly be available to stream online on Google’s own YouTube channel, although a holding video is yet to be available. There’s no live link on the I/O website yet, either, though you can use the handy links to add the event to your calendar of choice. Expect links to a livestream to be available closer to the day.

What to expect from Google I/O 2025

Little chat about Android 16: As Google gave Android 16 its own outing already, it’s likely that it won’t be mentioned all that much during I/O. In fact at last year’s event, Android was barely mentioned, while uses of the term «AI» went well over a hundred.

Android XR: Google didn’t talk much about Android XR during the Android show, focusing instead on the purely phone-based updates to the platform. We expected to hear more about the company’s latest foray into mixed-reality headsets in partnership with Samsung and its Project Moohan headset, so it’s possible that this is being saved for I/O proper.

Gemini: With Android being spun out into its own separate event, Google is evidently clearing the way for I/O to focus on everything else the company does. AI will continue to dominate the conversation at I/O, just as it did last year (though hopefully Google can make it more understandable) with updates to many of its AI platforms expected to be announced.

Gemini is expected to receive a variety of update announcements, including more information on its latest 2.5 Pro update which boasts various improvements to its reasoning abilities, and in particular to its helpfulness for coding applications. Expect lots of mentions of Google’s other AI-based products, too, including DeepMind, LearnLM and Project Astra. Let’s just hope Google has figured out how to make this information make any kind of sense.

Beyond AI, Google may talk about updates to its other products including GMail, Chrome and the Play Store, although whether these updates are big enough to be discussed during the keynote rather than as part of the developer-focused sessions following I/O’s opening remains to be seen.

Technologies

You Can Now Buy Nike’s $900 Workout Shoes for Compression and Heating

The Nike Hyperboots, designed to help you warm up and recover from workouts, launched Saturday.

Those workout shoes with compression and heating that Nike and Hyperice showed off at CES 2025 earlier this year weren’t just a concept. The Hyperboot is now available to buy online in North America, so they’re within reach, as long as you’re willing to spend $899.

The high-tops, which Nike and Hyperice call a wearable much like your smartwatch, help your feet warm up before a workout, and then recover after it. The shoes do this with heating and air-compression massage technology, taking the idea of heating pads and compression socks and making them mobile.

«You can definitely feel the heat in here,» CNET former mobile senior writer Lisa Eadicicco said when she had the chance to try these workout shoes on in January. She walked across a demo room in Las Vegas wearing the fancy footwear to test out the compression and heating features.

The boots massage and compress your ankles and feet, and in CNET’s test, we could especially feel the heat around the ankles. Buttons on the shoes let you adjust compression and the amount of heat with multiple settings for each.

«The Hyperboot contains a system of dual-air bladders that deliver sequential compression patterns and are bonded to thermally efficient heating elements that evenly distribute heat throughout the shoe’s entire upper,» Nike said.

The battery lasts for 1 to 1.5 hours on max heat and compression settings, or 8 hours if you’re only using the massage setting. It takes 5 to 6 hours to charge via USB-C cable. The boots come in five sizes: S, M, L, XL and XXL.