4 ms·
I don’t mind two step authentication using TOTP but as soon as you sign in to an android device with a google account, google decides to use that device for two
by mcny 3y ago
I don’t mind two step authentication using TOTP but as soon as you sign in to an android device with a google account, google decides to use that device for two step authentication and there’s no way to stop that short of signing out of google on the device.
But also how do app specific passwords protect you if you have malicious software on your computer rifling through your files?
- charcircuit 3y ago>But also how do app specific passwords protect you if you have malicious software on your computer rifling through your files? It minimizes the blast radius if it is compromised. A Google account provides access to much more than just email.
- jsnell 3y agoApp-specific passwords are limited to just a couple of services, so somebody stealing one of them can cause a lot less damage than if they got the actual Google password. The app-specific passwords are going to be unique rather than something you've reused on dozens of services, so the password being stolen won't be automatically pivoted to compromising your other accounts. Finally, their use can be audited, and each app-specific password can be revoked independently of each other and of the credentials giving full access to the account.