3 ms·

I use two-factor auth whenever it is available. I've also mandated it for all user accounts (on Google Apps) at my organization. For a while, I was trying to e

I use two-factor auth whenever it is available. I've also mandated it for all user accounts (on Google Apps) at my organization. For a while, I was trying to encourage adoption by expounding on its benefits, but then one of our users (without two-factor auth) had her account hacked, and I was able to employ the panic around the office to justify making it mandatory for everyone. This caused some pain for a little while (when two-factor auth enforcement is enabled for a Google Apps domain, users without two-factor auth enabled must use a temporary code, which can only be retrieved by a domain admin), and I wouldn't recommend this approach for more than a dozen users or so.

72deluxe 12y ago
Great idea. I am surprised so few use two-factor authentication. My bank requires it for logging in, sending money, even for going into the branch (thanks Barclays); RSA fobs or Quest Defender fobs were also used in a company I used to work for, for their VPN. With Google, the list of massive passwords they provide for logging in via POP3 is a useful thing to print off and have secreted at your house somewhere in case your phone gets pinched. And periodically/regularly tidying up old emails from your inbox (archiving them offline somewhere) is a way to keep the email account a bit safer, as there isn't any info in the mailbox.