4 ms·
2FA wasn't turned on for that particular account, Google just decided to "double check" one day.
by franga2000 3y ago
2FA wasn't turned on for that particular account, Google just decided to "double check" one day.
- akkartik 3y agoOh interesting. I think I haven't noticed this because I'm trying to disconnect from Google lately. These days I login on an incognito tab and log out when I'm done. But just with a password.
- firecall 3y agoYep - even with 2FA off they still like to check. I have a client who tries to share one Google / Gmail Inbox account between users internationally and Google does not like that at all! Google constantly requires verification for logins!
- a_dabbler 3y agoSounds like they should be doing automatic email forwarding or something instead
- jalk 3y agoThat only works for reading emails, not sending/replying using the shared account.
- toomuchtodo 3y agoWhat happens if passkeys are created for the account on everyone’s workstation?
- omnifischer 3y agoThis is stupid. You need to do some sort of delegation. If some one logins now in USA and 10 min later a login is detected from Singapore. And again if US login is detected - this will throw any security to bonkers. May be you/your client needs a proper workflow. May be you need to run some security company/email service at the level of Google to see.
- rcxdude 3y agoSure, but said delegation abilities frequently don't exist, are locked behind a very substantial paywall, or are simply very difficult to set up. Account sharing is a fallback which bypasses all of those issues and so is commonly used, especially in shadow-IT and smaller companies which don't have the resources to invest in a solution with better security properties.