4 ms·
They support multiple kinds of 2FA tokens (Yubikey, U2F, Google Authenticator, and others). I was even able to disable the phone-based 2FA, which means my acco
by DashRattlesnake 10y ago
They support multiple kinds of 2FA tokens (Yubikey, U2F, Google Authenticator, and others). I was even able to disable the phone-based 2FA, which means my account can't be hijacked by someone who's stolen my mobile number [1]. That also means I could get locked out if I lose all my tokens, but I'm willing to take the risk since I have my own domain, which could be easily ported to a new account.
[1] https://www.forbes.com/sites/laurashin/2016/12/20/hackers-have-stolen-millions-of-dollars-in-bitcoin-using-only-phone-numbers/#39f31f438bad https://www.forbes.com/sites/laurashin/2016/12/20/hackers-ha...
- aiy4noh2eX 10y agoThis (although good to hear - I would also be interested in a purely U2F 2FA setup for email) seems to only be concerned with security for the user's perspective. What about the security of the service itself from a more "backed" / overall perspective (those factors beyond the user's control)? As much as I dislike Gmail as a big brother it's hard to beat Google's security team.