Gmail acct verification - user security or google privacy invasion?

[Bob.]

I have many gmail accounts that I use for various purposes. A few of the more important purposes are security around the web (many addresses as opposed to one spread all over the internet) and organization (i.e., specific emails for specific purposes, tracking of business functions, etc).

I also create gmail accounts for friends whose machines I maintain (often used for registering accounts such as bitdefender's free AV, etc.).

Lately, Google has been sending me to a verification page, asking for a mobile ph# to message me for verification before they will allow the account to be created.

When this happens, I've managed to jump through some hoops to avoid giving them this information, as I don't trust google. I delete all cookies prior to creating a new acct, use a different machine on a different subnet, etc., but lately, that hasn't worked.

I understand the security aspect of two step verification, but have avoided putting it in motion thus far. I do use different a password safe and never use the same password or user name anywhere, and thus far, have not had any security breaches.

This is all just background for the following questions:

1. Does Google now require this verification for all new accts?

2. Am I being too cautious? I know my distrust is not entirely misplaced, but has it come to a point where the security of allowing google to have a mobile phone # connected to my gmail accts is more important than the privacy issues involved?

I do have android phones with various accts, but I really don't care for google linking all my gmail accounts to me or my business.

So, too cautious? Or should I consider buying a burner phone to allow these accts to be verified?

I don't really conduct any sensitive communications over gmail, but I have used some of these accounts for domain name registration and web hosting accounts.

Thanks for your input.

 

[lxskllr]

Dunno how new the policy is, but I don't give out my phone number unless absolutely necessary, and I don't consider email necessary. I don't trust Google(or any company) either. That said, you can use two factor authentication with your phone number. That's a security benefit, but I'd rather do something like that with a gpg key.

 

[Bob.]

Thanks for your thoughts.

 

[Ketchup]

I did not give them my number. My line of thought was to provide as little information as possible, and go in afterward to make my account options as secure as practical. For example, I almost never use the web interface, but when I do I log off when done. If I don't, it keeps me "logged in" whenever browsing to Google or YouTube.

 

[Bob.]

Hi ketchup79. The only info I generally give is the required fields (name, pw, birthday, all inaccurate, gender as other {edit: also inaccurate...heh!}). If I use a browser to log on (as I do for the accounts aren't frequently checked), I often get asked to supply a mobile ph#, but it's not required, and I breeze past it.

Sometimes in the creation of new accts, it *requires* a mobile number to text or message verification. I've circumvented that by clearing cookies, using a different browser or even a different machine. This time seems different, as none of the above worked. I'll likely try again in a day or two to see what happens. If not, I'll access a machine on a different network.

But I am curious as to why I can't get past it...new policy for all new accts or 'something else'? Hopefully 'something else', but what?

 

[Ketchup]

I don't know. I created a Gmail account for a family member just a couple hours ago and it created just fine without a mobile phone number.

 

[Bob.]

Thanks. It helps to know. I'll have to investigate further.