3 ms·

Maybe too late to give you any helpful advice, but setting up Advanced Protection may make sense. You need to buy at least two (preferably three) YubiKeys and t

Maybe too late to give you any helpful advice, but setting up Advanced Protection may make sense. You need to buy at least two (preferably three) YubiKeys and the password plus any of these keys allow you to login to your account. Nothing more, nothing less. Costs a few bucks, but at least the auth flow is very clear. Another thing you can do is to wait for a week and see if anything changes. Having the session last for more than a week may give you more options in passing the challenge.

dfdz 4y ago
Best advice in this thread: https://landing.google.com/advancedprotection/ https://landing.google.com/advancedprotection/
- fullstop 4y ago
  Keep in mind that this can make signing into some devices tricky. On devices which do not support webauthn (nintendo switch) it will prompt you to acknowledge the code sent to another device which does support webauthn. You can't authenticate some Roku channels as well, such as PhotoView for Google Photos.
  - tonymet 4y ago
    also many Google TVs do not support it
oftenwrong 4y ago
One downside of Advanced Protection for Android users that intend on linking the account to their device is that you will not be able to install apps from "aftermarket" app stores, like F-Droid. You can still install apps with `adb install`, though.
kobalsky 4y ago
I did this but I'm concerned about the recovery process. Google says at https://landing.google.com/advancedprotection/faq https://landing.google.com/advancedprotection/faq that: >>> If you lose your key and are still signed in on one of your devices, visit account.google.com to add or replace a key. Otherwise, submit a request to recover your account. Google may take a few days to verify it’s you and restore your access. I've assumed the risk of temporarily losing access to my account if I happen to lose all my hardware keys and devices for some reason while they confirm my identity, but from these posts I think that Google may not be of help at all and I could permanently lose access. I'm starting to wonder if I shouldn't go back to regular 2FA since I can safely backup those codes.

dfdz 4y ago

Best advice in this thread: https://landing.google.com/advancedprotection/ https://landing.google.com/advancedprotection/

fullstop 4y ago
Keep in mind that this can make signing into some devices tricky. On devices which do not support webauthn (nintendo switch) it will prompt you to acknowledge the code sent to another device which does support webauthn. You can't authenticate some Roku channels as well, such as PhotoView for Google Photos.
- tonymet 4y ago
  also many Google TVs do not support it

oftenwrong 4y ago

One downside of Advanced Protection for Android users that intend on linking the account to their device is that you will not be able to install apps from "aftermarket" app stores, like F-Droid. You can still install apps with `adb install`, though.

kobalsky 4y ago

I did this but I'm concerned about the recovery process. Google says at https://landing.google.com/advancedprotection/faq https://landing.google.com/advancedprotection/faq that: >>> If you lose your key and are still signed in on one of your devices, visit account.google.com to add or replace a key. Otherwise, submit a request to recover your account. Google may take a few days to verify it’s you and restore your access. I've assumed the risk of temporarily losing access to my account if I happen to lose all my hardware keys and devices for some reason while they confirm my identity, but from these posts I think that Google may not be of help at all and I could permanently lose access. I'm starting to wonder if I shouldn't go back to regular 2FA since I can safely backup those codes.