Discussion on:
View:
Show:
My U.S. cell phone doesn't work over there (Asia). I don't do it enough to justify the (really high) cost of an international plan, but I do it enough to eliminate 2-factor over a cell phone (or anything else that would depend on a cell phone). I'd be locked out for at least a couple of weeks at a time.
I wish I could put the codes on an encrypted USB drive and it ask for those. Not sure how I could use those on my Nexus 7 though. I think I'd have to root it and use an adapter cable to connect a USB drive to it.
I wish I could put the codes on an encrypted USB drive and it ask for those. Not sure how I could use those on my Nexus 7 though. I think I'd have to root it and use an adapter cable to connect a USB drive to it.
I believe you can use the Google Authenticator app to cover situations where you don't have voice/SMS access. I haven't tried this, but I think it's supposed to work for that (ie it doesn't need data access once it's bee set up).
Correct. The Google Authenticator app works if you do not have cell connection.
Another "offline" option is to use one of your backup codes. They are one-time use only, but would provide access.
Andy
Another "offline" option is to use one of your backup codes. They are one-time use only, but would provide access.
Andy
After having my account frozen for "questionable activity" a couple of times, I set up this 2-step authentication and haven't had any issues since.
While it is not fool-proof, it is better than just a password. I've even had my phone ring and give me a verification code that I didn't request which leads me to believe somebody got my password but still could not get in. Needless to say, I changed the password after that.
I don't see a mention about the Application Codes, passwords that can be used by native clients like Thunderbird, that can only be used to access application, like Thunderbird, but not through your browser or into your settings. These codes are easy to get and easy to revoke when logged into your Dashboard with 2-step authentication. The trick is to record them somewhere because once generated, you can't pull it up again afterwards.
While it is not fool-proof, it is better than just a password. I've even had my phone ring and give me a verification code that I didn't request which leads me to believe somebody got my password but still could not get in. Needless to say, I changed the password after that.
I don't see a mention about the Application Codes, passwords that can be used by native clients like Thunderbird, that can only be used to access application, like Thunderbird, but not through your browser or into your settings. These codes are easy to get and easy to revoke when logged into your Dashboard with 2-step authentication. The trick is to record them somewhere because once generated, you can't pull it up again afterwards.
Glad your experience has been good. And really glad to know that it seems like the 2-step authentication likely prevented unauthorized access to your account!
Good point about "authorized application" codes. I mentioned them only briefly in the section "two more important things to know". They can be a bit confusing for users first setting this up, so I wanted to mention them -- but not go into too much detail.
I know I end up reviewing the Authorized Application list every other month or so. I try lots of online software, so I'm always adding permissions and approvals. Probably should add to my monthly checklist to review these approvals in Google Apps, Facebook -and- Twitter.
Thanks for reading!
Andy
Good point about "authorized application" codes. I mentioned them only briefly in the section "two more important things to know". They can be a bit confusing for users first setting this up, so I wanted to mention them -- but not go into too much detail.
I know I end up reviewing the Authorized Application list every other month or so. I try lots of online software, so I'm always adding permissions and approvals. Probably should add to my monthly checklist to review these approvals in Google Apps, Facebook -and- Twitter.
Thanks for reading!
Andy
Chrome bookmark syncing between Android Chrome and the Computer version in most cases does not work.
Because many smartphone apps that don't run in a full browser can't request the confirmation code... for those you have to generate a service specific code to use instead of the password.
Just curious. Would this mean that every time my phone refreshes to get new messages that I will have to enter the access code?
On the Gmail app for Android (and I suspect other phone email clients) you'll need to generate an Application code as described in the article. You can save this just like your old password so it doesn't ask every time.
Nice step by step summary. I use Two-Factor Authentication across a lot of my accounts. I feel a lot more secure when I can telesign into my account. If you have that option available to you use it, it is worth the time and effort to have the confidence that your account won't get hacked and your personal information isn't up for grabs. I'm hoping that more companies start to offer this awesome functionality. This should be a prerequisite to any system that wants to promote itself as being secure.
- Keyboard Shortcuts:
- Prev
- Next
- Toggle
