Google 2-Step Verification

[Sushubh]

this is regular gmail. not google apps. i dont get you. google would have to provide a way to let you change the number in case you are changing it (changing providers/lost phone). and in case your password and mobile are both lost to the same individual... i do not think google can help you out much!

 

[tech_help]

this is regular gmail. not google apps.

i dont get you. google would have to provide a way to let you change the number in case you are changing it (changing providers/lost phone).

and in case your password and mobile are both lost to the same individual... i do not think google can help you out much!

Thats why I quit using gmail.
Since I am not using google apps, the day I have 2SV enabled, I will jump back to gmail.

Two Step Verification in Gmail – What is It and How It Works? Guidance for Beginners | Webupon

 

[Sushubh]

so what are you using now?

 

[tech_help]

yahoo

 

[amish]

Good feature, although I wont be using it.

 

[Sushubh]

yahoo

what security features yahoo provide that google does not wrt login and password protection?

---------- Post added at 01:28 AM ---------- Previous post was at 01:27 AM ----------

Good feature, although I wont be using it.

i have no real desire to use it... but i would probably give it a test when i get my next phone. using it through sms is sort of painful. android app is likely to be much better experience. (i hope!).

 

[shah]

I have been using it, and love it. I use an iPhone as my primary (can also use android or BB). I don't need a data plan or net connection - it is just a hash based on the time, so no network connectivity needed for the smart phone. For the backup I use my cell phone number. If i click "remember me" when logging in, I need to OTP only once in 30 days, otherwise it is every time!!

The application-specific password was a little difficult to find, but you *must* use it. See Authorizing applications and devices - Accounts Help

These passwords are revokable, namable. You must use it for programmatic (non-browser) access. Because non-browser can't ask for password & then OTP. Any browser access, google will ask for the OTP through a web page.

---------- Post added at 10:07 AM ---------- Previous post was at 10:04 AM ----------

Oh, and also they have backup codes that you can use in case your phone(s) are not available.

How do I post an image from my desktop?

---------- Post added at 10:15 AM ---------- Previous post was at 10:07 AM ----------

Are you using personal gmail?

My point is not to allow change of mobile number once entered, so if someone get access that person can change all the security related options. So we will end up losing the account. and then our mobile will come to rescue.


The thing is that in order to change the settings you will need to re-enter password & OTP! so it is ok.

---------- Post added at 10:19 AM ---------- Previous post was at 10:15 AM ----------

what are you talking about?

Give the URL.

Is it regarding gmail login?

send me an invite if possible

How do I get the email ids of users to invite from the forum?

---------- Post added at 10:33 AM ---------- Previous post was at 10:19 AM ----------

well this is not a service that allows me to send invites to others.

[/COLOR]you would need your mobile to be with you for every login!

they do provide some passwords that can be used once only for times you do not have a mobile with you.

if you lose these and your phone is no longer accessible, you are doomed i suppose you would have to recover your password using their system. sort of like that.

If you click "remember me", you need to enter OTP only once in 30 days. (cookie based)

For otp, you have :
(1) primary phone (sms, voice or google authenticator app)
(2) secondary phone (sms, voice)
(3) backup codes

If you lose ALL 3 - i.e. your primary phone , and your secondary phone, and your backup codes, only then will you be locked out, and need to fill out the account recovery form. That is very unlikely.

 

[Sushubh]

to upload images, use a service like imgur.com and post the codes that have something like [ i m g ] [ / i m g ]

 

[shah]

Here are my backup codes example:



I can use these as the OTPs in case I am traveling or don't have my phones with me (or if the phones battery is out, no network, etc).

 

[Sushubh]

arey bana. these are supposed to be secrets. though, it does not really matter because you still need the primary password to get through. but not a good idea to show them in public.