Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Google will begin automatically enrolling users in two-step verification

In an attempt to keep users' accounts secure, Google will soon require users to confirm their identity by accepting a prompt on their mobile devices.

Just in time for World Password Day, Google has announced that it will begin automatically enrolling users into its new two-step verification process. Users will soon be required to tap a Google prompt on their smartphone whenever they sign in to a Google service.

Users will be automatically opted in if their accounts are appropriately configured, though the company does not explicitly say what "appropriately configured" means.

Google points out that Android devices already feature Google's security keys, allowing users to receive Google prompts without installing a secondary app. For iPhone users, users will be required to install the Google Smart Lock app.

The move is designed to keep a user's email account safe in the event of a data breach. Google states that "66% of Americans admit to using the same password across multiple sites, which makes all those accounts vulnerable if any one falls."

While Google says they'd like to move forward for a password-free future, they also point out that Google's Password Manager allows users to create complex and unique passwords and store them in their Google account. The service is available for Chrome-based browsers, Android, and iOS.

Recently, Google announced plans to eventually abandon third-party cookies and move to a new method of collecting data on users in aggregate to assist in targeting ads. The company began opting in users into beta test without their knowledge.

Stay on top of all Apple news right from your HomePod. Say, "Hey, Siri, play AppleInsider," and you'll get latest AppleInsider Podcast. Or ask your HomePod mini for "AppleInsider Daily" instead and you'll hear a fast update direct from our news team. And, if you're interested in Apple-centric home automation, say "Hey, Siri, play HomeKit Insider," and you'll be listening to our newest specialized podcast in moments.



26 Comments

Naiyas 8 Years · 108 comments

Whilst I am not one, I do know many people who do not have a mobile phone at all. Moves like this exclude a huge number of people and all tech companies and governments today are guilty of excluding a huge number of people.

It should not be mandatory to require a mobile device for anything on the web or to interact with government.

meterestnz 6 Years · 83 comments

Beta testers opted in without their knowledge — typical Google. Says it all about this company 

charlesatlas 9 Years · 401 comments

I've already been locked out of several old Gmail accounts in the last couple of years. Google would demand I confirm my identity, which I did by answering my security questions (back when accounts had them), but they then demanded I enter my phone number for verification, and I know for undeniable fact that I have never linked my phone number to any Gmail account. Guess I'll lose a few more accounts now.

MplsP 8 Years · 4047 comments

I have a google account that I sparingly use. When I do log into it, Google asks me to set up 2 factor authentication which I have steadfastly refused to do for the simple reason that I don't want Google to have my cell phone number.

gatorguy 13 Years · 24627 comments

MplsP said:
I have a google account that I sparingly use. When I do log into it, Google asks me to set up 2 factor authentication which I have steadfastly refused to do for the simple reason that I don't want Google to have my cell phone number.

So "someone" is initiating logging into your Google Chrome account but you're OK with Google not verifying it's you? Kids, a friend/roommate who thinks they might have a valid password for you, or worse someone who has purchased your stolen credentials from Dark Web markets  for some account, financially, social or whatever,  to be accessed on-line.  Geesh, that makes zero sense. What do you think Google is going to do with your phone number without your express permission, prank-call you?