Cyber Risks · Krebs on Security

Google Adds 2-Factor Security to Gmail, Apps

Summary: Google announced it will offer two-step verification for Gmail and Google Apps, requiring a user ID, password and a six-digit code sent to a mobile phone, available immediately to enterprise customers and free to consumers within a few months. Users can receive codes by text message or a Google mobile app, and authenticated devices can skip the process for 30 days; Google also provides five one-time backup codes per account.

Why it matters: Google product manager Travis McCoy said user names and passwords often end up being the weak link in account compromises, and the article cites a nearby restaurant that lost almost $50,000 when thieves stole an employee's online banking credentials - a case where only a user name and password stood between the thieves and the cash.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related