The physical device only works after verifying the login site is truly a Google website, not a phishing site.


-->