3 ms·
Am I missing something or the fact that once gmail password is compromised, the attacker could easily change the phone no. or set it to use Google Authenticator
by noisy_boy 12y ago
Am I missing something or the fact that once gmail password is compromised, the attacker could easily change the phone no. or set it to use Google Authenticator? Further steps regarding voicemail etc. will be moot after that.
- dtech 12y agoYou need to login to change the settings. If 2 factor authentication is enabled only a password isn't enough to login. That is exactly what 2FA means.
- lxgr 12y agoUnfortunately, modifying the 2FA settings for a Google account doesn't require the second factor again if the user is logged in; the password is sufficient.