Google 2 Step Verification

[thescreensavers]

I haven't seen this discussed here.

http://www.google.com/support/accounts/bin/static.py?page=guide.cs&guide=1056283&topic=1056284

I just enabled it on my 2 accounts and have the Android App with the code, so when I log in it asks for a code which I can get off my App

Might get annoying you say? Well you can add the computer to a list and for 30 days it will be on the green list so it wont ask you for a code again. Such as your home computer

And for apps which dont/cant use the code you can add it to another list within the program and it gives a specific password for the App.

So I have K9-Mail on my phone, I put in the specific password which google generates randomly and that's it.

Then my Android phone gave me an error showing that it cant log into the main account any more, so I go into the 2 step verification panel and make it generate the specific password for my phone.



So overall I can never get my account comprised, I dont see a reason people should not enable this. Sure if you dont have an android phone or and iphone, you can also get the code texted to you.

 

[Modelworks]

It is an extra layer of protection,but the best thing people can do is to just use longer passwords. For security I wouldn't use gmail at all. Corporate run mail servers like gmail have inherent security flaws and I just use them for general use and keep important emails on a server that I download the content from hourly and delete from online. With google you never know if the content was deleted, if it was stored on 1 server or 100,etc. More and more companies are being compromised and the less information stored online the better.

 

[Nintendesert]

Longer passwords won't protect you from a keylogger. These are effectively one time passwords using your phone as the issued device. It is great security and something more companies should employ to include MMOs, banks and other highly targeted institutions.

 

[Scouzer]

I'm using this in tandem with a good password and I feel quite secure. Modelworks is right though, using multifactor authentication and a good password doesn't necessarily protect you from an overall system breach--like the Playstation Network.

It's always some degree of risk being in the cloud... but an acceptable risk IMO.