Amber Neely
In an attempt to keep users' accounts secure, Google will soon require users to confirm their identity by accepting a prompt on their mobile devices.
Just in time for World Password Day, Google has announced that it will begin automatically enrolling users into its new two-step verification process. Users will soon be required to tap a Google prompt on their smartphone whenever they sign in to a Google service.
Users will be automatically opted in if their accounts are appropriately configured, though the company does not explicitly say what "appropriately configured" means.
Google points out that Android devices already feature Google's security keys, allowing users to receive Google prompts without installing a secondary app. For iPhone users, users will be required to install the Google Smart Lock app.
The move is designed to keep a user's email account safe in the event of a data breach. Google states that "66% of Americans admit to using the same password across multiple sites, which makes all those accounts vulnerable if any one falls."
While Google says they'd like to move forward for a password-free future, they also point out that Google's Password Manager allows users to create complex and unique passwords and store them in their Google account. The service is available for Chrome-based browsers, Android, and iOS.
Recently, Google announced plans to eventually abandon third-party cookies and move to a new method of collecting data on users in aggregate to assist in targeting ads. The company began opting in users into beta test without their knowledge.
Stay on top of all Apple news right from your HomePod. Say, "Hey, Siri, play AppleInsider," and you'll get latest AppleInsider Podcast. Or ask your HomePod mini for "AppleInsider Daily" instead and you'll hear a fast update direct from our news team. And, if you're interested in Apple-centric home automation, say "Hey, Siri, play HomeKit Insider," and you'll be listening to our newest specialized podcast in moments.
William Gallagher
Andrew Orr
Marko Zivkovic
Christine McKee
Malcolm Owen
26 Comments
Whilst I am not one, I do know many people who do not have a mobile phone at all. Moves like this exclude a huge number of people and all tech companies and governments today are guilty of excluding a huge number of people.
It should not be mandatory to require a mobile device for anything on the web or to interact with government.
Beta testers opted in without their knowledge — typical Google. Says it all about this company
I've already been locked out of several old Gmail accounts in the last couple of years. Google would demand I confirm my identity, which I did by answering my security questions (back when accounts had them), but they then demanded I enter my phone number for verification, and I know for undeniable fact that I have never linked my phone number to any Gmail account. Guess I'll lose a few more accounts now.
I have a google account that I sparingly use. When I do log into it, Google asks me to set up 2 factor authentication which I have steadfastly refused to do for the simple reason that I don't want Google to have my cell phone number.