Hot answers tagged multi-factor-auth
Authenticator works even when you don't have any sort of network available for your smartphone. I don't know about your mobile provider, but I don't trust mine to deliver SMS messages in anything that resembles a timely manner. Beyond that, it is more secure, as you've noted.
The reason why you aren't seeing the option to enable the 2-factor authentication in your settings page may indicate that the Administrator for your Google Apps for your domain hasn't enabled the feature to be used by people in your Google for Business instance. If that is the case, the answer to your question would be: The administrator for your Google ...
Possible, paid but not for 2-step - just for custom domain. tl;dr; Usage of Google mail servers with custom domain requires Google Apps for Business, formerly knowned just as Google Apps. Quoting from Google Apps Help Center As of December 6, 2012, Google no longer offers new accounts for the free edition of Google Apps To enable two ...
I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.
Dito GAM can now generate backup codes for users even if they don't have 2SV turned on yet. You can: Create the new user. Generate backup codes with the command "gam user firstname.lastname@example.org update backupcodes" Communicate one backup code to the user along with the initial password. Instruct the user to log in at: ...
Follow these steps: Account > Security > 2-step Verification Setting > Registered Computers > Require Codes
My understanding is that after you've set it up, your phone or whatever device you are running the authenticator app on becomes your physical factor. No matter how it was set up, and this will depend on the implementation of the system, you now have a physical 'token', so in terms of security, after you enter your password you must have that token. If you ...
Only top voted, non community-wiki answers of a minimum length are eligible