4 ms·
I think Google asks for 2-factor only when you are connecting from a new browser/device, so it would be highly suspicious to see that happening randomly. Of co
by devit 11y ago
I think Google asks for 2-factor only when you are connecting from a new browser/device, so it would be highly suspicious to see that happening randomly.
Of course, the fact that he's asked for a password while being already logged in on Gmail is also suspicious, but less so since other sites do that.
- eli 11y agoA new computer, and also every 30 days or if it detects something "suspicious." So, no, it wouldn't seem that unusual to be prompted to login again.
- adrianmacneil 11y agoIt's definitely suspicious. However, often it's not enough to trigger any alarm bells. It's fairly easy to mindlessly type in password/2fa codes into a website ("stupid google asking for my password again") rather than automatically think about a potential phishing attack. While I haven't see it reported whether or not they had 2fa enabled, we can hope that they had taken this very basic security measure. Actually one of the best preventions against this is using a password manager. I was nearly caught by a phishing site once, and I only noticed because 1Password was refusing to autofill the password field.