Tag Info

Hot answers tagged

12

Clear the browser's cookies (and perhaps cache/history). 'Trust this computer' option doesn’t work For computers you trust, Google recommends you select the "Trust this computer" option when you are asked for a verification code. When you check this box, you won’t have to enter a code every time you sign in to your account from that computer. ...


10

According to Google Support: Removing trusted computers from your list You can remove computers from your set of trusted computers at any time. To do so, sign in to your account and go to your 2-step verification settings page. Under the “Advanced” section, you’ll have the choice to remove the computer you’re using at the time or all other ...


9

I found it: When you visit you Google Account Settings, you can select Security in the sidebar menu. It will list 2-factor authentication. Click the edit button next to it. This will lead you to this page: https://accounts.google.com/b/0/SmsAuthConfig At the bottom of the page there would be a section about Trusted Computers. It will say that the ...


7

You surely can. The Google Authenticator app allows you to add as many accounts as you like! As Dez mentions correctly, in addition to this, you can also use the same phone number for multiple text messaging authentication accounts.


7

You can have multiple devices generate the same one time passwords by scanning the same QR code into both devices during the setup wizard. If you have already left the setup page you will have to generate a new QR code aka shared secret (Google won't display it again for security reasons). Update: Make sure that the clocks of both devices are perfectly ...


4

If you click "Can't scan the QR code?" during device setup, the secret key is displayed. You can then store that secret key VERY securely (think: printed in a safe, GPG encrypted with a strong key, or whatever) and add it to new devices without having to get all devices together and re-key them all at once. If your secret key is exposed you lose all ...


3

Possible, paid but not for 2-step - just for custom domain. tl;dr; Usage of Google mail servers with custom domain requires Google Apps for Business, formerly knowned just as Google Apps. Quoting from Google Apps Help Center As of December 6, 2012, Google no longer offers new accounts for the free edition of Google Apps To enable two ...


3

Google does not provide us any way to manually set the expiration limits of the verification cookies. This is an excellent case to offer up to them as a suggestion for them to add and option during issue time to auto revoke the code after a certain amount of time. Until Google implements some form of expiration control you could as manually change the ...


3

Temporarily turning off 2-factor is not an ideal situation. Depending on the number of users, you could be chasing the user to get it setup so you can turn it back on. After while, you will just leave it off. We recommend you create a suborganization called something like "Pre-2-factor" and move the new user into the suborg. That suborg has the 2-factor ...


3

I was having the same issue until I installed Clocksync (Must have rooted phone if on android) and synced both phones to atomic time prior to verification process. I scanned the QR code into both devices which in turn generated the same keys on both devices. 1 of the devices is connected to a phone provider that updates the time automatically which is ...


2

Take a look at this Google Support site. Beside suggesting to send codes to your secondary phone or using a trusted computer, it also explains another way for the worst case to get access by filling out a form: Sign in to your account with your username and password. On the verification code challenge page, click Other ways to get a verification ...


2

It's not disabled in general; I still have it on my account - did Facebook's attempts to send you SMS recently fail or something? Check your account settings to check if your mobile phone number is correct and able to receive SMS


2

It sounds like you have 2 factor authentication Enforcement turned on for the domain: I'm thinking you could turn that off so all users are not forced to have 2 factor authentication. The best answer I could find if you want to leave that setting enabled would be to setup an exception group: Have all users and administrators enroll in 2-step ...


2

It is indeed true that Twitter can't send SMS in countries with a long code. Looks like there's an oversight in this system so that it's allowing SMS verification to be used even though it should require confirmation via incoming SMS. Twitter provides instructions at https://support.twitter.com/articles/20170409, but unfortunately those aren't of much use. ...


1

I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.


1

Dito GAM can now generate backup codes for users even if they don't have 2SV turned on yet. You can: Create the new user. Generate backup codes with the command "gam user newguy@example.com update backupcodes" Communicate one backup code to the user along with the initial password. Instruct the user to log in at: ...


1

Immediately after creating a new user, go to that user's Security tab and click on "Generate New Codes" to generate a list of One-Time-Use codes. Then give the user the first one or two codes from that list along with the URL https://accounts.google.com/b/0/SmsAuthSettings for SMS authentication (verify this, it might be different for you) so they can ...


1

Follow these steps: Account > Security > 2-step Verification Setting > Registered Computers > Require Codes


1

My understanding is that after you've set it up, your phone or whatever device you are running the authenticator app on becomes your physical factor. No matter how it was set up, and this will depend on the implementation of the system, you now have a physical 'token', so in terms of security, after you enter your password you must have that token. If you ...


1

First, I don't really know if Google Authenticator works with static security keys, but if they do, such a key is probably a lot longer than your usual password would be. EDIT: I can't find an example of suck a security key, I have to turn 2-factor auth off and on to get a new one, but @Basilevs suggests that they are only 10 characters long. Second, it's ...


1

Facebook login approvals seem to be renabled on my account, and judging by the Help Pages seems to be back up in general. A Facebook employee also mentions that it should be rolled out to all accounts soon.


1

Yes, login approvals have been disabled by facebook, as new features and shortcuts are being added. Also, if you try the same phone number on multiple accounts then they're being disabled but as soon as possible they will be enabled soon. Another method is, if they have been automatically disabled from your account then try to create a strong password ...


1

As you have figured out yourself if you use 2-step verification in a non browser setting (basicly any place where Google can not provide you with a field to enter your verification code) then you have the option to generate for each application and web service that accesses your Google account a separate password. The application names on the settings page ...



Only top voted, non community-wiki answers of a minimum length are eligible