Successful phishing attacks dropped to zero
In 2017, Google mandated hardware security keys for all 85,000+ employees. Since then, the company reports no employee account has been successfully phished โ strong evidence that hardware keys defeat credential phishing.