In an effort to combat phishing, Google will allow Android phones and iPhones to be used as security keys.