6 ms·

Looks interesting. Does anyone else use Two-Factor authentication for their emails? I do. I also use that SMS service for PayPal. Does nobody else?

organsnyder 12y ago
I use two-factor auth whenever it is available. I've also mandated it for all user accounts (on Google Apps) at my organization. For a while, I was trying to encourage adoption by expounding on its benefits, but then one of our users (without two-factor auth) had her account hacked, and I was able to employ the panic around the office to justify making it mandatory for everyone. This caused some pain for a little while (when two-factor auth enforcement is enabled for a Google Apps domain, users without two-factor auth enabled must use a temporary code, which can only be retrieved by a domain admin), and I wouldn't recommend this approach for more than a dozen users or so.
- 72deluxe 12y ago
  Great idea. I am surprised so few use two-factor authentication. My bank requires it for logging in, sending money, even for going into the branch (thanks Barclays); RSA fobs or Quest Defender fobs were also used in a company I used to work for, for their VPN. With Google, the list of massive passwords they provide for logging in via POP3 is a useful thing to print off and have secreted at your house somewhere in case your phone gets pinched. And periodically/regularly tidying up old emails from your inbox (archiving them offline somewhere) is a way to keep the email account a bit safer, as there isn't any info in the mailbox.
jj00 12y ago
I use it, but I have to admit I'm not much of a fan. All it has done is annoy me by forcing me to stop my flow and look-up a secondary field. I think there should be a 3rd option of just having a second password. Better yet, add a few other options as well.
- 0xffff2 12y ago
  What additional security would be derived from a second password?
  - jj00 12y ago
    A second password is just another form of a second factor (in 2-factor authorization)
    - stephenr 12y ago
      2 factor auth is "something I know" (password) and "something I have" (token/device to provide a one time password) Two passwords you know is not 2 factor auth
    - EpicEng 12y ago
      No, it's one factor, twice.
      - mobiplayer 12y ago
        Not even twice, just split in two fields :)

organsnyder 12y ago

I use two-factor auth whenever it is available. I've also mandated it for all user accounts (on Google Apps) at my organization. For a while, I was trying to encourage adoption by expounding on its benefits, but then one of our users (without two-factor auth) had her account hacked, and I was able to employ the panic around the office to justify making it mandatory for everyone. This caused some pain for a little while (when two-factor auth enforcement is enabled for a Google Apps domain, users without two-factor auth enabled must use a temporary code, which can only be retrieved by a domain admin), and I wouldn't recommend this approach for more than a dozen users or so.

72deluxe 12y ago
Great idea. I am surprised so few use two-factor authentication. My bank requires it for logging in, sending money, even for going into the branch (thanks Barclays); RSA fobs or Quest Defender fobs were also used in a company I used to work for, for their VPN. With Google, the list of massive passwords they provide for logging in via POP3 is a useful thing to print off and have secreted at your house somewhere in case your phone gets pinched. And periodically/regularly tidying up old emails from your inbox (archiving them offline somewhere) is a way to keep the email account a bit safer, as there isn't any info in the mailbox.

jj00 12y ago

I use it, but I have to admit I'm not much of a fan. All it has done is annoy me by forcing me to stop my flow and look-up a secondary field. I think there should be a 3rd option of just having a second password. Better yet, add a few other options as well.

0xffff2 12y ago
What additional security would be derived from a second password?
- jj00 12y ago
  A second password is just another form of a second factor (in 2-factor authorization)
  - stephenr 12y ago
    2 factor auth is "something I know" (password) and "something I have" (token/device to provide a one time password) Two passwords you know is not 2 factor auth
  - EpicEng 12y ago
    No, it's one factor, twice.
    - mobiplayer 12y ago
      Not even twice, just split in two fields :)