The application-password that you create will need to be added in two places in your Apple Mail app.
There is your Incoming Mail Server password, which is immediately visible under your account information.
Below that you can see the selection for Outgoing Mail Server (SMTP). The default will be Gmail. Click on the drop down box and select "Edit Server ...
There's too much variation in how web apps implement user authentication to answer this. Some will delete the cookies they've created; some will destroy the "session" variables that are associated with your account and your current browsing...session; others will just redirect you to a login page.
When I build web apps with user authentication, the user is ...
I found it:
When you visit you Google Account Settings, you can select Security in the sidebar menu.
It will list 2-factor authentication. Click the edit button next to it.
This will lead you to this page: https://accounts.google.com/b/0/SmsAuthConfig
At the bottom of the page there would be a section about Trusted Computers. It will say that the ...
Authenticator works even when you don't have any sort of network available for your smartphone.
I don't know about your mobile provider, but I don't trust mine to deliver SMS messages in anything that resembles a timely manner.
Beyond that, it is more secure, as you've noted.
Google only offers the following options:
SMS Text Message
Google Authenticator application mobile app
1-time use printable backup codes
You could use the printed codes to access your account when traveling, but other than that you'd need a phone or device that can run the Authenticator application.
Google Help - Setup of 2-Factor ...
I assume you want to create your control panel app so that users can log in to it via Google's login services. If that's the case, you can limit access to your app in at least two different ways:
If you follow these guidelines, that is, create your control panel app with Google Apps in mind, it will be installed along your existing Google Services. As such, ...
I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.
I ran into this problem as well, and after a while determined it's related to the Keychain Access where the passwords are stored.
One forum I found suggested running a "Repair" of the login keychain (available via the "First Aid" menu item), which resolved the problem for some people. For me, however, the repair process found nothing to fix.
Finally, I ...
The problem was that my account has been frozen (even tough on login, the message is "incorrect email or password"). Amazon wanted me to send them a document by fax to prove my identity.
I have no fax. I ended up creating another account.
Google does not provide us any way to manually set the expiration limits of the verification cookies. This is an excellent case to offer up to them as a suggestion for them to add and option during issue time to auto revoke the code after a certain amount of time.
Until Google implements some form of expiration control you could as manually change the ...
I don't know where you're located, but in my corner of the world, this is not unusual.
If you wish to push text messages, you will need to sign up with an SMS service provider. You can reserve a short, 4-digit number for your services, which is expensive.
Or you can reserve a keyword within a 4-digit number. The number is then shared among other services, ...
On Google's support site, regarding 2-step verification, they speak directly of this issue and say this it more or less comes down to being sure that your check off the "remember this password" box
Quoted directly from Google's support site:
Soon after you turn on 2-step verification, you'll be alerted that your password is no longer working (see image ...
Two-factor authentication is now available on WordPress.com blogs.
Wordpress.com blogs now supports two-factor authentication both via Google Authenticator as well as SMS.
See Wordpress | Two Step Authentication for an how-to on setting it up.
The vaguely named "Gmail" access is pretty much giving the application unlimited IMAP/SMTP access to your account (it provides an OAuth login which merely replaces giving it your password). In essence it is pretty much unlimited permission to your Gmail, so yes they could delete all your emails.
Providing any sort of access to your account will be a risk, ...
Go to the page, make sure your logged in, under the avatar, the links on the left hand side you will see the following options:
Is this your business?
Do you know the owner?
Create a Page
Add to My Page's Favorites
Click "Is this your business?" and proceed with verification. If you fail at that, contact Facebook customer support and (it has worked ...
As an additional observation to the other answers, always use the site's log out function when you are not on your computer. Always!
...it's possible on some web apps that your login is associated with a persistent cookie, or your IP address, or whatever, and just closing the browser won't log you out. In such a case it's conceivable that ...
Some websites don't log you off unless you click "Log Out". Even if you restart your computer, those sites could keep you logged in (unless the cookies are automatically removed by your web browser); so anyone who opens that site on your computer could be logged in as you. I've experienced this with many websites.
Hence, I recommend you always clicking "...
You don't need to reuse the application-specific password as long as the application is remembering the password you give it. If you don't let the application remember your password, I think you will have to generate a new one every time you want to log in.
What is the advantage of Google forcing me to keep me cellphone on, working and with me at all times
The point being if your password is stolen/compromised, there's an additional step required before it can be accessed by the attacker.
keep me cellphone on, working and with me at all times
when I don't have my phone and I'll want to login
You can switch to Google Authenticator based code generation from Security Settings → Code generator menu.
Click on Set up another way to get security codes, it'll guide you to setting up Googel Authenticator for code generation
Those steps are correct for example if you go to your settings and go to the Forwarding and POP/IMAP tab you will see three sections: Forwarding, POP Download, and IMAP Access. With this said the steps straight from Google are as follows:
On the second account (the one mail is to be pulled FROM):
Click on the Gear icon in upper right corner.
Click on ...
In Facebook, on top top-right, click on the icon representing a lock to open the Security menu. Go to "See More Settings".
On the next page, go to "Apps" in the list on the left. This will show a list of all apps which you have allowed to access your Facebook account. Find this one ("Honey") and click on it.
This will show what pieces of information you ...
To answer your points using the same numbering scheme:
All Google should share is that fact that you are you. The 3rd party site is asking Google "is this person who he claims to be?". Google should answer "yes" or "no". No further identity information is needed nor should it be provided without an explicit request.
No site should know (or indeed need to ...
Do not change your password first. Go into the security settings
Click the gear in the top right.
Click the Accounts tab.
In the "Grant access to your account" section, click delete on any account you want to remove.
If you do have someone tagging along, when you change the password, they come with you.
If you delete the "tag - along", ...
Amazon Web Services (AWS) supports two-factor authentication in the
form of an RSA Token or using Google Authenticator
LastPass also offers two-factor login using Google Authenticator
PayPal offers two-factor SMS authentication
You don't have an explicit "OpenID credential". OpenID is a standard for authentication; the whole point of it is that you have an account from some provider, and they authenticate you for other sites. It's not that a Google account comes with some OpenID certificate; the Google account is the OpenID account.
If you're a Chrome user, there's an extension that automatically bypasses the splash called Straight to Google Analytics. It takes a second or so to redirect, but much better than clicking that Sign On link every time.
It's their splash screen, and annoyingly it has always been like that. Unfortunately there is no way to skip it without going directly to the /web.
I'd suggest just bookmarking the link to http://www.google.com/analytics/web/, or if you use Chrome, type in the full URL (same as above) and eventually it'll learn to autocomplete to that instead of the splash ...
Using two-step authentication with the Google Authenticator app is kind of like using an RSA key or other security token for logging in. It adds an additional layer of security to your account, augmenting the "something you know" portion (password) with a "something you have" (cellphone) option as well. It is not required, but the use of this code makes it ...