3 ms·
I thought Gmail required a phone number as well when 2FA is configured and someone is trying to recover their account. Otherwise it would be to easy to bypass.
by capoditutticapi 8y ago
I thought Gmail required a phone number as well when 2FA is configured and someone is trying to recover their account. Otherwise it would be to easy to bypass. But maybe the dude just likes to live dangerous by keeping his millions in a cleartext evernote file.
- Crosseye_Jack 8y agoWhile they do make you add a phone number to the account first when enabling 2FA you can remove it afterwards though (iirc) you have to remember to not just remove the number as an auth method but also remove it as a recovery method. Failing to do so opens you up to getting your phone account transferred to a different phone/sim and using that to do the recovery process to gain access to the account.