4 ms·
Just turn off MFA for Google. I did this during 2023 and started sleeping so much better at night. (Curious how easy it was for me to forget that it's somethin
by akkartik 3y ago
Just turn off MFA for Google. I did this during 2023 and started sleeping so much better at night.
(Curious how easy it was for me to forget that it's something I can turn off, once I turned it on.)
- franga2000 3y ago2FA wasn't turned on for that particular account, Google just decided to "double check" one day.
- akkartik 3y agoOh interesting. I think I haven't noticed this because I'm trying to disconnect from Google lately. These days I login on an incognito tab and log out when I'm done. But just with a password.
- firecall 3y agoYep - even with 2FA off they still like to check. I have a client who tries to share one Google / Gmail Inbox account between users internationally and Google does not like that at all! Google constantly requires verification for logins!
- a_dabbler 3y agoSounds like they should be doing automatic email forwarding or something instead
- jalk 3y agoThat only works for reading emails, not sending/replying using the shared account.
- toomuchtodo 3y agoWhat happens if passkeys are created for the account on everyone’s workstation?
- omnifischer 3y agoThis is stupid. You need to do some sort of delegation. If some one logins now in USA and 10 min later a login is detected from Singapore. And again if US login is detected - this will throw any security to bonkers. May be you/your client needs a proper workflow. May be you need to run some security company/email service at the level of Google to see.
- rcxdude 3y agoSure, but said delegation abilities frequently don't exist, are locked behind a very substantial paywall, or are simply very difficult to set up. Account sharing is a fallback which bypasses all of those issues and so is commonly used, especially in shadow-IT and smaller companies which don't have the resources to invest in a solution with better security properties.
- firebot 3y agoUhm. You can't disable this shit. It's a weird problem. Can't log in to my account from unknown mobile but works just fine on an unknown PC. So frustrating.