3 ms·

This sounds like an argument for adding hardware multi-factor auth in google. It's not a panacea, but a good starting point that can't be easily spoofed or hija

This sounds like an argument for adding hardware multi-factor auth in google. It's not a panacea, but a good starting point that can't be easily spoofed or hijacked.

mynameisvlad 12y ago
They already have it: https://support.google.com/accounts/answer/6103523?hl=en https://support.google.com/accounts/answer/6103523?hl=en And it adds nothing, since it still has fallbacks to the existing systems.
- asuffield 12y ago
  You should be able to remove less secure authentication mechanisms via accounts.google.com, after setting up a security key
  - noisy_boy 12y ago
    You still need to keep atleast one backup method in case the security key is corrupted/broken/lost etc.
    - asuffield 12y ago
      Print out a recovery code and keep it somewhere safe.
    - pngai 12y ago
      You can have two or more security keys associated with your account on Google.
  - mynameisvlad 12y ago
    Oh really? I thought that it forced you to go back to the app if you use a non-U2F browser.