38
Google has fixed this now. You can now go to Security > Basic Settings > Go to advanced settings to enforce 2-step verification.
Then click New User enrollment period and set to 1 day. This will allow a new user one day to set their 2FA before they are locked out.
22
Immediately after creating a new user, go to that user's Security tab and click on "Generate New Codes" to generate a list of One-Time-Use codes.
Then give the user the first one or two codes from that list along with the URL https://accounts.google.com/b/0/SmsAuthSettings for SMS authentication (verify this, it might be different for you) so they can ...
15
According to Google Support:
Removing trusted computers from your list
You can remove computers from your set of trusted computers at any
time. To do so, sign in to your account and go to your 2-step
verification settings page. Under the “Advanced” section, you’ll have
the choice to remove the computer you’re using at the time or all
other ...
14
Temporarily turning off 2-factor is not an ideal situation. Depending on the number of users, you could be chasing the user to get it setup so you can turn it back on. After while, you will just leave it off.
We recommend you create a suborganization called something like "Pre-2-factor" and move the new user into the suborg. That suborg has the 2-factor ...
12
Clear the browser's cookies (and perhaps cache/history).
'Trust this computer' option doesn’t work
For computers you trust, Google recommends you select the "Trust this computer" option when you are asked for a verification code. When you check this box, you won’t have to enter a code every time you sign in to your account from that computer.
This ...
9
I found it:
When you visit you Google Account Settings, you can select Security in the sidebar menu.
It will list 2-factor authentication. Click the edit button next to it.
This will lead you to this page: https://accounts.google.com/b/0/SmsAuthConfig
At the bottom of the page there would be a section about Trusted Computers. It will say that the ...
9
Authenticator works even when you don't have any sort of network available for your smartphone.
I don't know about your mobile provider, but I don't trust mine to deliver SMS messages in anything that resembles a timely manner.
Beyond that, it is more secure, as you've noted.
8
You surely can. The Google Authenticator app allows you to add as many accounts as you like!
As Dez mentions correctly, in addition to this, you can also use the same phone number for multiple text messaging authentication accounts.
6
I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.
6
That you aren't seeing the option to enable the 2-factor authentication in your settings page may indicate that the Administrator for your Google Apps for your domain hasn't enabled the feature to be used by people in your Google for Business instance.
If that is the case, the answer to your question would be:
The administrator for your Google Apps ...
6
Even to activate the Authenticator, first you need to complete SMS/Voice setup.
Then, follow the directions for your type of device explained on Google Help page for 2-Step Verification.
Read this Make Your Email Hacker Proof for more understanding.
5
Follow these steps:
Account > Security > 2-step Verification Setting > Registered Computers > Require Codes
5
If you click "Can't scan the QR code?" during device setup, the secret key is displayed.
You can then store that secret key VERY securely (think: printed in a safe, GPG encrypted with a strong key, or whatever) and add it to new devices without having to get all devices together and re-key them all at once.
If your secret key is exposed you lose all ...
4
It sounds like you have 2 factor authentication Enforcement turned on for the domain:
I'm thinking you could turn that off so all users are not forced to have 2 factor authentication.
The best answer I could find if you want to leave that setting enabled would be to setup an exception group:
Have all users and administrators enroll in 2-step ...
4
Google does not provide us any way to manually set the expiration limits of the verification cookies. This is an excellent case to offer up to them as a suggestion for them to add and option during issue time to auto revoke the code after a certain amount of time.
Until Google implements some form of expiration control you could as manually change the ...
4
It's done in your settings:
Profile → My Settings → Security Key → Get Started → Get Security Key
You can either pay for a physical token that will display your one-time password (OTP) key, or you can register a mobile phone, the instructions are right there.
Note: to register a phone it needs to be able to receive text messages, as that is how the OTP is ...
4
I recently got a similar message, "Your Google verification code is" and then an unusually long verification code (much more than the normal six characters you get through 2 factor authentication).
An hour or so before, I had used the Hangouts app and tried to verify my phone number. The first attempt failed, and for unrelated reasons I restarted the phone ...
4
It's likely that the number is only used to send you a code. I doubt you would be able to call the number to speak with someone.
You should consider a hardware key like the Yubikey for a second factor. SMS (and your phone number) are vulnerable to being stolen which could give a hacker access to your account. https://www.yubico.com/products/yubikey-...
3
I didn't have it yet on my account so here's how I did it. The correct name of the product is Paypal Security Key
Log into Paypal
Search for "Security Key"
A result should be auto-suggested as you type
Click the suggested keyword
On the resulting page click "Security Key" under the "Best Matches" section
In the resulting text find the "get one today" ...
3
Possible, paid but not for 2-step - just for custom domain.
tl;dr;
Usage of Google mail servers with custom domain requires Google Apps for Business, formerly knowned just as Google Apps.
Quoting from Google Apps Help Center
As of December 6, 2012, Google no longer offers new accounts for the free edition of Google Apps
To enable two step-...
3
I'm afraid not, no. 2-step verification is for your Google Account, not for any particular app.
However, you should be able to create an app-specific password. These are special passwords for apps that don't support 2-step verification that you want to give access to your account.
Go to the 2-step verification page in your MyAccounts.
On the "App-specific ...
3
Trusted devices expiring after 30 days can be disabled in Advanced Settings.
Login to LastPass.
Open your LastPass Vault.
Open Account Settings.
Select Show Advanced Settings.
Scroll down and select Skip 30 day expiration for trusted clients.
Click Update.
Enter your account password and press Confirm.
2
Take a look at this Google Support site. Beside suggesting to send codes to your secondary phone or using a trusted computer, it also explains another way for the worst case to get access by filling out a form:
Sign in to your account with your username and password.
On the verification code challenge page, click Other ways to get a verification code?...
2
It's not disabled in general; I still have it on my account - did Facebook's attempts to send you SMS recently fail or something? Check your account settings to check if your mobile phone number is correct and able to receive SMS
2
It is indeed true that Twitter can't send SMS in countries with a long code. Looks like there's an oversight in this system so that it's allowing SMS verification to be used even though it should require confirmation via incoming SMS.
Twitter provides instructions at https://support.twitter.com/articles/20170409, but unfortunately those aren't of much use. ...
2
I had a similar issue and instead of receiving texts, I switched over to the Google Authenticator App on my phone (also works with other services besides Google, like GitHub for example). You should keep the backup codes anyway—they come in handy if you don't have your phone with you, you lose it, or your battery dies etc.
2
After logging in, head over to Connected accounts & click on Connect next to Google.
Alternatively, at the Login page, if you login with Google, Bitbucket will offer to connect your existing account with the Google account if the email ids are the same.
2
You can (now) use the same number for Login Verification (2FA)!
Twitter Login Verification Article:
Note: If you manage multiple accounts that use the same phone number, it is possible to use login verification for each account. For added security, we recommend enabling login verification for all of your accounts.
You can only have SMS Notifications/...
2
Google set this as an default value and didn't provide any option to change this settings. BUt you can give this as a product feedback where they will change it based on the number of request
2
This article explains how to enable two factor authentication. It contains a link to the Office Admin Center. When the link was clicked the Admin Center opened.
Users > Active users > select user > Manage multi-factor authentication > select user > enable
When the user logs is, he/she has to enter his/her phonenumber, choose between receive a text message ...
Only top voted, non community-wiki answers of a minimum length are eligible
