And because they won't work on fake login sites, they can thwart phishing attacks that try to fool you into typing your password onto a counterfeit website.

The move follows hardware security key support from other tech companies, like Google, Microsoft, Twitter and Facebook parent Meta.

A big caveat, though: Although hardware security keys and the Advanced Data Protection program lock down your account better, they also mean Apple can't help you recover access.

"This feature is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government," Apple said in a statement.

Hardware security keys have been around for years, but the Fast Identity Online, or FIDO, group has helped standardize the technology and integrate its use with websites and apps.

MacOS and iOS let you protect your iCloud account and Apple ID with hardware security keys.