10

Authenticator works even when you don't have any sort of network available for your smartphone. I don't know about your mobile provider, but I don't trust mine to deliver SMS messages in anything that resembles a timely manner. Beyond that, it is more secure, as you've noted.


8

I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.


4

I don't know where you're located, but in my corner of the world, this is not unusual. If you wish to push text messages, you will need to sign up with an SMS service provider. You can reserve a short, 4-digit number for your services, which is expensive. Or you can reserve a keyword within a 4-digit number. The number is then shared among other services, ...


3

In Facebook, on top top-right, click on the icon representing a lock to open the Security menu. Go to "See More Settings". On the next page, go to "Apps" in the list on the left. This will show a list of all apps which you have allowed to access your Facebook account. Find this one ("Honey") and click on it. This will show what pieces of information you ...


3

Those steps are correct for example if you go to your settings and go to the Forwarding and POP/IMAP tab you will see three sections: Forwarding, POP Download, and IMAP Access. With this said the steps straight from Google are as follows: On the second account (the one mail is to be pulled FROM): Click on the Gear icon in upper right corner. Click on ...


3

You can switch to Google Authenticator based code generation from Security Settings → Code generator menu. Click on Set up another way to get security codes, it'll guide you to setting up Google Authenticator for code generation


3

Two-factor authentication is now available on WordPress.com blogs. Wordpress.com blogs now supports two-factor authentication both via Google Authenticator as well as SMS. See Wordpress | Two Step Authentication for an how-to on setting it up.


2

Do not change your password first. Go into the security settings Click the gear in the top right. Select Settings. Click the Accounts tab. In the "Grant access to your account" section, click delete on any account you want to remove. If you do have someone tagging along, when you change the password, they come with you. If you delete the "tag - along", ...


2

It is indeed true that Twitter can't send SMS in countries with a long code. Looks like there's an oversight in this system so that it's allowing SMS verification to be used even though it should require confirmation via incoming SMS. Twitter provides instructions at https://support.twitter.com/articles/20170409, but unfortunately those aren't of much use. ...


2

I had a similar issue and instead of receiving texts, I switched over to the Google Authenticator App on my phone (also works with other services besides Google, like GitHub for example). You should keep the backup codes anyway—they come in handy if you don't have your phone with you, you lose it, or your battery dies etc.


2

Not exactly a hash, but every email has a unique ID. This value is accessible through the X-GM-MSGID email header. X-GM-MSGID: 1459153717434291429 This value, when converted to base-16, is 143ff493385c94e5, and with this we can directly link to said email: https://mail.google.com/mail/u/0/#inbox/143ff493385c94e5. (note: that link won't actually work ...


2

Google set this as an default value and didn't provide any option to change this settings. BUt you can give this as a product feedback where they will change it based on the number of request


2

These are essentially CouchDB authentication related questions, not specific to Couchappy: 1. How do I create additional CouchDB users in Couchappy? You can use Futon to create a new admin account in your Couchdb instance: Go to https://instance.couchappy.com/_utils/ Login as admin Go to configuration At the bottom click on "Add a new section" Section: ...


2

No, as per my knowledge no one can access email from twitter details, even you will not be able to access your email without knowing password of that particular email id.


2

While it may seem counter-intuitive, Google believes your IMAP client is a "less secure application" relative to your web browser. You must therefore Allow less secure apps: If you don't use 2-Step Verification, you might need to allow less secure apps to access your account. Visit https://www.google.com/settings/security/lesssecureapps (log in if ...


2

When you first setup, you will have two codes: from SMS on your mobile (because you had to list your mobile to enable login security) from your code generator app (from the FB mobile app or a third party code generator) You will find that both these codes will work. Now we will disable login code being sent to sms (mobile). Next time you login to ...


2

The function ImportJSONBasicAuthentication is basically just a wrapper function for ImportJSONAdvanced but changes some options before calling it (the line with var fetchOptions initiliaztion call sets up options accordingly). You'd need to include the function ImportJSONAdvanced and any functions it might also call (dependancies). Notice the return value ...


1

Everything is safe. I've contacted GitHub support about this, and this is their answer: I've confirmed with our notifications team that the email_token parameter is not sensitive nor poses any security risk. The token is just used for tracking clicks in our notification emails. I've opened an issue with our team to see if we can tidy these email replies up ...


1

I believe that's relying on the the JSON import library by Chris Keller, found here. As its description says, To use go to Tools --> Script Editor and add the script and save. This means the entire script, not just one function from it.


1

Two possibilities spring to mind. The first is that this is a (spear-)phishing attempt. Someone is trying to trick you into giving up the credentials for your account. That the name doesn't match wouldn't surprise me; would-be online scammers don't have to be smart. Since you say the email headers look legit, I think another possibility is that the owner ...


1

From Google Help: Removing trusted computers from your list You can remove computers from your set of trusted computers at any time. To do so, sign in to your account and go to your 2-Step Verification settings page. Under the “Advanced” section, you’ll have the choice to remove the computer you’re using at the time or all other computers. If you choose to ...


1

Google now supports 2-Factor Authentication through a process called U2F. Yubico have made a series of Yubikeys that now support the U2F standard. https://www.yubico.com/applications/fido/ At this time the only browser capable of supporting U2F authentication appears to be Google Chrome.


1

SMS is the most common way to deliver OTPs. It’s convenient as almost everyone has a phone so they can easily get SMS. At the same time, SMS is considered as one of the least secure methods to get an OTP due to the risk that SMS messages may be intercepted or redirected. NIST is no longer recommending two-factor authentication systems that use SMS, because ...


1

It can not be done with Google Authenticator or Authy app. Now I only saw two options with paypal you can see information here The Security Key is available in 2 versions: Security Key card: This is an electronic device that creates a unique security code instantly at the press of a button. It is the size of a credit card. Mobile phone Security Key: You can ...


1

Are they seriously saying they're going to follow people and post tweets using my account without my intervention? The scope of the authorization is that should you authorize, they can tweet, follow, and update your profile. Note that it's they can, not that they will. Twitter's authorization scope allows for read-only, read+write, read+write+send dm This ...


1

Let's just start with Twitter for the site that you mentioned weheartit.com If you don't how that login is provided. The site(weheartit.com) had created a twitter application at http://dev.twitter.com and made the app with read , write permissions. (You don't wanna get into the coding part unless you're a programmer). It is the same with Facebook, Google+ ...


1

Google Authenticator App is a very good choice but did you lose your device and got locked out of all of your accounts? For this reason I moved over to use Authy app Full Backups Multiple Devices All your accounts, one app Manage 2-Step Verification for your online accounts like Gmail, Facebook, Dropbox, LastPass, Evernote, Amazon, and many others! All ...


1

Facebook currently (May 2017) requires either "Text Message" (SMS) or "Security Key" (U2F hardware token) to be enabled as a backup second factor in order to use 2FA. If you have a hardware token, and a browser that supports it, you can add it as a factor. Once it's set up, you can disable SMS verification.


1

This is not possible on Wordpress.com hosting. The "plugin" optionality is highly limited and curated on Wordpress.com - so to get a wider breadth of functionality, an upgrade to self-hosted WP is needed.


1

Flickr seems to run on the Yahoo! profile system. Once you get yourself logged in, in Flickr's title bar on the far right is a button to open a user presence menu. Open Settings, and on the bottom of the Personal Information tab you'll see Yahoo account options, one of which will be the ability to associate your Flickr account with a different Yahoo ...


Only top voted, non community-wiki answers of a minimum length are eligible