Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

It looks like Google's two-factor authentication has switched to using long-expiration cookies for remembering "trusted" user agents, instead of the 30 day expiration previously used. This seems somewhat less secure because I now have to remember to manually deauthorize computers that I haven't used in a while.

Is there any way to restore the 30 day limit, short of some browser extension that automatically adjusts the cookie expiration date?

share|improve this question
    
"It looks like" this to me too, but did you find any references for this? –  Benjol Nov 8 '12 at 5:50
    
Found this, not sure it's an official answer, but at least it's corroboration that the system has changed. –  Benjol Nov 8 '12 at 5:57
add comment

1 Answer 1

Google does not provide us any way to manually set the expiration limits of the verification cookies. This is an excellent case to offer up to them as a suggestion for them to add and option during issue time to auto revoke the code after a certain amount of time.

Until Google implements some form of expiration control you could as manually change the cookies and set their expiration date to 30 days out from the day you change it. A Google search for *"cookie editor" will give you many results for plugins for Chrome, Firefox, Opera, Safari. You should also be able to narrow down results for an IE plugin, regular program, or even a standalone or portable application as well. Editing cookies is something that has been around for plenty long enough for developers to have many different solutions available, so you should be able to find something that will fit your particular needs and situation.

It is also ill advised from a security point of view to be providing a blanket authorization on systems that may be open to public use. Cookies are normally user specific so you may be alright if you use separate secured accounts to log into these machines.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.