Google Advanced Protection Aims To Safeguard Those Most At Risk From Targeted Attacks

The program limits access to emails and files from non-Google services and blocks fraudulent account access with extra steps needed to prove you are the one accessing your account. Protection against phishing attacks sees the physical Security Key in the form of a USB key required to access your account. Other authentication factors are rendered unusable when you are issued a Security Key, such as codes sent via SMS or Google Authenticator app.

That Security Key is needed when you sign in on a new computer, browser, mobile device or if you get signed out. That is important because if you are using it on a single computer you won't be forced to use more complex authentication methods constantly.

Advanced Protection will limit access from third-party apps to your most important data, such as emails and Drive files to prevent exploits. This means that third-party apps will no longer be able to access Gmail or Drive; you will have to use the Gmail app or Inbox by Gmail for secure access. Access to Gmail or Photos will only be possible using Chrome browser.

If you frequently use Apple Mail, Contacts, and Calendar apps, they don't support Security Keys and won't be able to access your data. You will have to use Gmail, Inbox, or Google calendar apps on iOS for access. 

Advanced Protection adds additional steps to unlock accounts when needed to prevent unauthorized users from gaining access. If you lose access to your account and both Security Keys, additional verification will take "a few days" according to Google to restore access to your account. Google doesn't give you the security keys; you do have to buy them and you can register for the program here.