4 ms·
Man, this thread is such a shinning example of why "trust, but verify" is a phrase. There is ABSOLUTELY an option to enable 2FA on a Google account now that do
by accuratefud 4y ago
Man, this thread is such a shinning example of why "trust, but verify" is a phrase.
There is ABSOLUTELY an option to enable 2FA on a Google account now that does not require giving them a phone number. There's a clear "Advanced Options" link that lets you choose a security key, which is what folks should be using anyway.
- drsh2k 4y agouse virtual authenticator (https://developer.chrome.com/docs/devtools/webauthn/ https://developer.chrome.com/docs/devtools/webauthn/)
- no_time 4y agoDoes that actually work? I assume google verifies the authenticity keypair(I forgot the specific term) that cannot be extracted authentic devices.
- birksherty 4y agoAlmost nobody in the world have physical key and they shouldn't need to buy one when 2fa apps are sufficient for most people.
- fmajid 4y agoTOTP doesn’t protect against phishing, U2F keys do. Sadly very few companies have them as an option, which goes to show how 2FA is mostly security theater at all but a handful of companies.
- vort3 4y agoTrue, I just didn't write that because physical security key is not an option where I live. Other than security key, it's only phone number or adding account to the phone. I'm sorry I didn't mention that in my post, I wasn't trying to lie, I just can't obtain physical key and I don't think I have to have physical key to read my emails.
- FDSGSG 4y agoWhere is that? Judging by your comment history, maybe Kazakhstan? I can easily find physical security keys for sale in Kazakhstan. For example miningshop.kz in Almaty has Ledger Nano S in stock. Besides, you don't need an actual physical key for U2F.
- rstuart4133 4y agoDon't feel bad. I recently went through the process of enabling app passwords and what not for google accounts. I did that because I lost control of one account and decided to implement every recovery option possible on the others - like TOPT's and backup codes. If there is a way to do it without purchasing stuff like tokens or entering phone numbers, I could not see it. If there is a way of doing it, I suspect it's deliberately well hidden. I also suspect what they enforce varies by country.
- Handytinge 4y agoThis may vary regionally. I went through this with an account recently and did not have this option, despite looking for it (as I do have a hardware key).