3 ms·

What is "Google's 2FA" ?

• ProAm 5y ago
  It's the Google Sign In prompts when they moved away from SMS for 2FA [1] [2] [1] https://support.google.com/accounts/answer/7026266 https://support.google.com/accounts/answer/7026266 [2] https://www.forbes.com/sites/zakdoffman/2020/06/17/google-confirms-powerful-new-security-move-impacting-all-users-goodbye-sms/ https://www.forbes.com/sites/zakdoffman/2020/06/17/google-co...
  • staticassertion 5y ago
    Ah, got it thanks.
• PeterWhittaker 5y ago
  They have a range of second factor options, including simple SMS to your phone, the use of their authenticator app (which presumably uses TOTP ([1]), and which could therefore be replaced with compatible alternatives, e.g., LastPass's authenticator app), or USB keys containing a second factor (possibly TOTP-based). [2] has an overview of Google's TOTP implementation. They all do the same basic thing: userid and password let them know who you claim to be, which they validate using one of the second factors listed above. [1] https://tools.ietf.org/rfc/rfc6238.txt https://tools.ietf.org/rfc/rfc6238.txt [2] https://en.wikipedia.org/wiki/Google_Authenticator https://en.wikipedia.org/wiki/Google_Authenticator
  • staticassertion 5y ago
    Yeah I could think of multiple answers to my questions, which is why I asked.