6 ms·
If done properly, immensely. Sites can log invalid password attempts, and unscrupulous sites could include attempted usernames and passwords. That basically g
by shaftway 10y ago
If done properly, immensely.
Sites can log invalid password attempts, and unscrupulous sites could include attempted usernames and passwords. That basically gives them a dictionary of accounts to try, because let's face it, most people use the same password for multiple services. Sometimes people's muscle memory kicks in and they accidentally type their password into the wrong site, or the wrong field.
With Google's 2FA, you need access to either a pre-printed list of emergency codes, or the ability to see the person's incoming texts. That's where the "if done properly" caveat comes in. Google Voice is generally a bad idea. If someone accidentally gets into your email because you left it open, they also have access to your incoming texts.
- newjersey 10y agoI'd like to respectfully disagree. When done correctly, Google Voice can be as good as if not better than a traditional cell phone. I treat my email with more care than I treat my bank accounts. However, Google Voice is probably not as good as the app on your phone though.
- shaftway 10y agohttps://support.google.com/accounts/answer/185834?hl=en#gvoice https://support.google.com/accounts/answer/185834?hl=en#gvoi... I remembered the advice, but not the reason. It's because you can easily lock yourself out of any way to get your otp. So maybe it's too secure?
- newjersey 10y agoAh. I have an app for my main Google account but for other Google accounts, I have them sent to my Google Voice number. (: Mostly because I'm lazy and want to copy paste from hangouts on the computer.
- kennydude 10y agoUsing Google Authenticator app (or any TOTP app, I use 1password), you skip the need for access to incoming SMS