Forest Global Training Partners

Cyber Risks · Krebs on Security

Google Adds 1-Time Passwords to Gmail, Apps

Summary: Google announced that Gmail and other Google applications would begin offering optional two-step verification, sending a one-time pass code to a user's mobile or land line phone in addition to a username and password. The feature had been available for several months to business customers and to "hundreds of thousands" of regular users who lost control of their accounts to password theft, and Google said it would roll the option out to all users starting that day.

Why it matters: The option sits inside Gmail's user settings panel, an area Krebs notes many users never visit, and users can still be locked out of their own accounts or tricked by social engineering into handing over the codes. Krebs also notes the process is more robust than what many banks offer for online authentication, amid an epidemic of e-banking account takeovers aided by password theft.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related