And they won't work on fake login sites, so they can thwart phishing attacks that try to fool you into typing your password onto a counterfeit website.

A big caveat, though: Although hardware security keys and the Advanced Data Protection program lock down your account better, they also mean Apple can't help you recover access.

"This feature is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government," Apple said in a statement.

Hardware security keys have been around for years, but the Fast Identity Online, or FIDO, group has helped standardize the technology and integrate its use with websites and apps.

MacOS and iOS let you protect your iCloud account and Apple ID with hardware security keys.

Google, Microsoft, Apple and other allies are also working to support a different FIDO authentication technology called passkeys.