41
Google has fixed this now. You can now go to Security > Basic Settings > Go to advanced settings to enforce 2-step verification.
Then click New User enrollment period and set to 1 day. This will allow a new user one day to set their 2FA before they are locked out.
22
Immediately after creating a new user, go to that user's Security tab and click on "Generate New Codes" to generate a list of One-Time-Use codes.
Then give the user the first one or two codes from that list along with the URL https://accounts.google.com/b/0/SmsAuthSettings for SMS authentication (verify this, it might be different for you) so they can ...
15
According to Google Support:
Removing trusted computers from your list
You can remove computers from your set of trusted computers at any
time. To do so, sign in to your account and go to your 2-step
verification settings page. Under the “Advanced” section, you’ll have
the choice to remove the computer you’re using at the time or all
other ...
14
Temporarily turning off 2-factor is not an ideal situation. Depending on the number of users, you could be chasing the user to get it setup so you can turn it back on. After while, you will just leave it off.
We recommend you create a suborganization called something like "Pre-2-factor" and move the new user into the suborg. That suborg has the 2-factor ...
9
Authenticator works even when you don't have any sort of network available for your smartphone.
I don't know about your mobile provider, but I don't trust mine to deliver SMS messages in anything that resembles a timely manner.
Beyond that, it is more secure, as you've noted.
8
I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.
6
That you aren't seeing the option to enable the 2-factor authentication in your settings page may indicate that the Administrator for your Google Apps for your domain hasn't enabled the feature to be used by people in your Google for Business instance.
If that is the case, the answer to your question would be:
The administrator for your Google Apps ...
6
Even to activate the Authenticator, first you need to complete SMS/Voice setup.
Then, follow the directions for your type of device explained on Google Help page for 2-Step Verification.
Read this Make Your Email Hacker Proof for more understanding.
5
Follow these steps:
Account > Security > 2-step Verification Setting > Registered Computers > Require Codes
5
If you click "Can't scan the QR code?" during device setup, the secret key is displayed.
You can then store that secret key VERY securely (think: printed in a safe, GPG encrypted with a strong key, or whatever) and add it to new devices without having to get all devices together and re-key them all at once.
If your secret key is exposed you lose all ...
4
I recently got a similar message, "Your Google verification code is" and then an unusually long verification code (much more than the normal six characters you get through 2 factor authentication).
An hour or so before, I had used the Hangouts app and tried to verify my phone number. The first attempt failed, and for unrelated reasons I restarted the phone ...
4
It sounds like you have 2 factor authentication Enforcement turned on for the domain:
I'm thinking you could turn that off so all users are not forced to have 2 factor authentication.
The best answer I could find if you want to leave that setting enabled would be to setup an exception group:
Have all users and administrators enroll in 2-step ...
4
It's likely that the number is only used to send you a code. I doubt you would be able to call the number to speak with someone.
You should consider a hardware key like the Yubikey for a second factor. SMS (and your phone number) are vulnerable to being stolen which could give a hacker access to your account. https://www.yubico.com/products/yubikey-...
4
Trusted devices expiring after 30 days can be disabled in Advanced Settings.
Login to LastPass.
Open your LastPass Vault.
Open Account Settings.
Select Show Advanced Settings.
Scroll down and select Skip 30 day expiration for trusted clients.
Click Update.
Enter your account password and press Confirm.
3
Possible, paid but not for 2-step - just for custom domain.
tl;dr;
Usage of Google mail servers with custom domain requires Google Apps for Business, formerly knowned just as Google Apps.
Quoting from Google Apps Help Center
As of December 6, 2012, Google no longer offers new accounts for the free edition of Google Apps
To enable two step-...
3
I'm afraid not, no. 2-step verification is for your Google Account, not for any particular app.
However, you should be able to create an app-specific password. These are special passwords for apps that don't support 2-step verification that you want to give access to your account.
Go to the 2-step verification page in your MyAccounts.
On the "App-specific ...
2
It is indeed true that Twitter can't send SMS in countries with a long code. Looks like there's an oversight in this system so that it's allowing SMS verification to be used even though it should require confirmation via incoming SMS.
Twitter provides instructions at https://support.twitter.com/articles/20170409, but unfortunately those aren't of much use. ...
2
I had a similar issue and instead of receiving texts, I switched over to the Google Authenticator App on my phone (also works with other services besides Google, like GitHub for example). You should keep the backup codes anyway—they come in handy if you don't have your phone with you, you lose it, or your battery dies etc.
2
After logging in, head over to Connected accounts & click on Connect next to Google.
Alternatively, at the Login page, if you login with Google, Bitbucket will offer to connect your existing account with the Google account if the email ids are the same.
2
You can (now) use the same number for Login Verification (2FA)!
Twitter Login Verification Article:
Note: If you manage multiple accounts that use the same phone number, it is possible to use login verification for each account. For added security, we recommend enabling login verification for all of your accounts.
You can only have SMS Notifications/...
2
Google set this as an default value and didn't provide any option to change this settings. BUt you can give this as a product feedback where they will change it based on the number of request
2
This article explains how to enable two factor authentication. It contains a link to the Office Admin Center. When the link was clicked the Admin Center opened.
Users > Active users > select user > Manage multi-factor authentication > select user > enable
When the user logs is, he/she has to enter his/her phonenumber, choose between receive a text message ...
2
Choosing more options should let you send an email to a 'backup' account.
Once you're logged in, try disabling 2-factor authentication
1
From Google Help:
Removing trusted computers from your list
You can remove computers from your set of trusted computers at any time. To do so, sign in to your account and go to your 2-Step Verification settings page. Under the “Advanced” section, you’ll have the choice to remove the computer you’re using at the time or all other computers. If you choose to ...
1
Google now supports 2-Factor Authentication through a process called U2F. Yubico have made a series of Yubikeys that now support the U2F standard.
https://www.yubico.com/applications/fido/
At this time the only browser capable of supporting U2F authentication appears to be Google Chrome.
1
SMS is the most common way to deliver OTPs. It’s convenient as almost everyone has a phone so they can easily get SMS. At the same time, SMS is considered as one of the least secure methods to get an OTP due to the risk that SMS messages may be intercepted or redirected. NIST is no longer recommending two-factor authentication systems that use SMS, because ...
1
Google Authenticator App is a very good choice but did you lose your device and got locked out of all of your accounts?
For this reason I moved over to use Authy app
Full Backups
Multiple Devices
All your accounts, one app
Manage 2-Step Verification for your online accounts like Gmail, Facebook, Dropbox, LastPass, Evernote, Amazon, and many others! All ...
1
You could work around this limitation by setting up additional SMS receiver services.
Update: As @Saeed points out, Twitter now lets you use a Time-based One Time Password (TOTP) authentication app like Google Authenticator, Authy, Duo Mobile, 1Password, etc. This is more secure and less hassle than SMS.
One app ought to be able to support multiple ...
1
I was having the same problem, but using the URL https://drive.google.com/keep/ is working for me.
1
An alternative causing less load on service desks, instead of sending the backup codes is to set and use the recovery phone.
Settings:
New user enrollment period - Never
Apply the policy to all users
To create a new user
Set the recovery phone
Generate the "backup verification codes" (you don't have to share those with anyone, but it's important ...
Only top voted, non community-wiki answers of a minimum length are eligible
