The application-password that you create will need to be added in two places in your Apple Mail app.
There is your Incoming Mail Server password, which is immediately visible under your account information.
Below that you can see the selection for Outgoing Mail Server (SMTP). The default will be Gmail. Click on the drop down box and select "Edit Server ...
There's too much variation in how web apps implement user authentication to answer this. Some will delete the cookies they've created; some will destroy the "session" variables that are associated with your account and your current browsing...session; others will just redirect you to a login page.
When I build web apps with user authentication, the user is ...
I found it:
When you visit you Google Account Settings, you can select Security in the sidebar menu.
It will list 2-factor authentication. Click the edit button next to it.
This will lead you to this page: https://accounts.google.com/b/0/SmsAuthConfig
At the bottom of the page there would be a section about Trusted Computers. It will say that the ...
Authenticator works even when you don't have any sort of network available for your smartphone.
I don't know about your mobile provider, but I don't trust mine to deliver SMS messages in anything that resembles a timely manner.
Beyond that, it is more secure, as you've noted.
Google only offers the following options:
SMS Text Message
Google Authenticator application mobile app
1-time use printable backup codes
You could use the printed codes to access your account when traveling, but other than that you'd need a phone or device that can run the Authenticator application.
Google Help - Setup of 2-Factor ...
I assume you want to create your control panel app so that users can log in to it via Google's login services. If that's the case, you can limit access to your app in at least two different ways:
If you follow these guidelines, that is, create your control panel app with Google Apps in mind, it will be installed along your existing Google Services. As such, ...
I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.
I ran into this problem as well, and after a while determined it's related to the Keychain Access where the passwords are stored.
One forum I found suggested running a "Repair" of the login keychain (available via the "First Aid" menu item), which resolved the problem for some people. For me, however, the repair process found nothing to fix.
Finally, I ...
The problem was that my account has been frozen (even tough on login, the message is "incorrect email or password"). Amazon wanted me to send them a document by fax to prove my identity.
I have no fax. I ended up creating another account.
Google does not provide us any way to manually set the expiration limits of the verification cookies. This is an excellent case to offer up to them as a suggestion for them to add and option during issue time to auto revoke the code after a certain amount of time.
Until Google implements some form of expiration control you could as manually change the ...
I don't know where you're located, but in my corner of the world, this is not unusual.
If you wish to push text messages, you will need to sign up with an SMS service provider. You can reserve a short, 4-digit number for your services, which is expensive.
Or you can reserve a keyword within a 4-digit number. The number is then shared among other services, ...
On Google's support site, regarding 2-step verification, they speak directly of this issue and say this it more or less comes down to being sure that your check off the "remember this password" box
Quoted directly from Google's support site:
Soon after you turn on 2-step verification, you'll be alerted that your password is no longer working (see image ...
The vaguely named "Gmail" access is pretty much giving the application unlimited IMAP/SMTP access to your account (it provides an OAuth login which merely replaces giving it your password). In essence it is pretty much unlimited permission to your Gmail, so yes they could delete all your emails.
Providing any sort of access to your account will be a risk, ...
Two-factor authentication is now available on WordPress.com blogs.
Wordpress.com blogs now supports two-factor authentication both via Google Authenticator as well as SMS.
See Wordpress | Two Step Authentication for an how-to on setting it up.
As an additional observation to the other answers, always use the site's log out function when you are not on your computer. Always!
...it's possible on some web apps that your login is associated with a persistent cookie, or your IP address, or whatever, and just closing the browser won't log you out. In such a case it's conceivable that ...
Some websites don't log you off unless you click "Log Out". Even if you restart your computer, those sites could keep you logged in (unless the cookies are automatically removed by your web browser); so anyone who opens that site on your computer could be logged in as you. I've experienced this with many websites.
Hence, I recommend you always clicking "...
Go to the page, make sure your logged in, under the avatar, the links on the left hand side you will see the following options:
Is this your business?
Do you know the owner?
Create a Page
Add to My Page's Favorites
Click "Is this your business?" and proceed with verification. If you fail at that, contact Facebook customer support and (it has worked ...
You don't need to reuse the application-specific password as long as the application is remembering the password you give it. If you don't let the application remember your password, I think you will have to generate a new one every time you want to log in.
Looks like they are using iframes to pull in content. You can browse directly to these sites:
I think Openbravo is taking advantage of the fact that you are more likely to have a Google account and be logged on than not. They attempted to do the same with Facebook just below the ...
What is the advantage of Google forcing me to keep me cellphone on, working and with me at all times
The point being if your password is stolen/compromised, there's an additional step required before it can be accessed by the attacker.
keep me cellphone on, working and with me at all times
when I don't have my phone and I'll want to login
You can switch to Google Authenticator based code generation from Security Settings → Code generator menu.
Click on Set up another way to get security codes, it'll guide you to setting up Googel Authenticator for code generation
In Facebook, on top top-right, click on the icon representing a lock to open the Security menu. Go to "See More Settings".
On the next page, go to "Apps" in the list on the left. This will show a list of all apps which you have allowed to access your Facebook account. Find this one ("Honey") and click on it.
This will show what pieces of information you ...
You don't have to link the account specifically. You just use "Log in with Google Account" when you log in to Trello.
They automatically match you to your previously registered account if you used your gmail address for that.
Do not change your password first. Go into the security settings
Click the gear in the top right.
Click the Accounts tab.
In the "Grant access to your account" section, click delete on any account you want to remove.
If you do have someone tagging along, when you change the password, they come with you.
If you delete the "tag - along", ...
To answer your points using the same numbering scheme:
All Google should share is that fact that you are you. The 3rd party site is asking Google "is this person who he claims to be?". Google should answer "yes" or "no". No further identity information is needed nor should it be provided without an explicit request.
No site should know (or indeed need to ...
Amazon Web Services (AWS) supports two-factor authentication in the
form of an RSA Token or using Google Authenticator
LastPass also offers two-factor login using Google Authenticator
PayPal offers two-factor SMS authentication
It's their splash screen, and annoyingly it has always been like that. Unfortunately there is no way to skip it without going directly to the /web.
I'd suggest just bookmarking the link to http://www.google.com/analytics/web/, or if you use Chrome, type in the full URL (same as above) and eventually it'll learn to autocomplete to that instead of the splash ...
If you're a Chrome user, there's an extension that automatically bypasses the splash called Straight to Google Analytics. It takes a second or so to redirect, but much better than clicking that Sign On link every time.
You don't have an explicit "OpenID credential". OpenID is a standard for authentication; the whole point of it is that you have an account from some provider, and they authenticate you for other sites. It's not that a Google account comes with some OpenID certificate; the Google account is the OpenID account.