If you¡¯ve been using the same password across multiple sites, downloading softwares from the internet and clicking on email links, there¡¯s a possibility that a hacker can steal your password and lock you out of your account.
Two-factor authentication adds an extra layer of security to your account and can keep the bad guys out even if they have your password. Now, Google has announced it¡¯s going to take an extra step to help keep user accounts more secure: it¡¯s going to enroll people in two-factor authentication by default.
Once you enable the two-step verification, Google sends a prompt to your smartphone whenever a sign in attempt is made so as to confirm that it¡¯s legitimate. ¡°Using their mobile device to sign in gives people a safer and more secure authentication experience than passwords alone,¡± the company said in a blog post.
Google already uses 2FA to secure accounts, but it¡¯s been optional until now. The search giant said that it is also building advanced security technologies into devices to make this multi-factor authentication seamless and even more secure than a password.?
¡°For example, we¡¯ve built our security keys directly into Android devices, and launched our Google Smart Lock app for iOS, so now people can use their phones as their secondary form of authentication,¡± the post read.
Google¡¯s Security Checkup page tells users whether 2FA is set up on their account; the strength of your password and whether you¡¯re reusing it across different sites; and also automatically sends an alert to those whose password has been compromised.
The easiest way to set up 2FA across your Google accounts is by heading over to the main landing page and ¡®Get Started¡¯.? You may also alternatively open your Google Account, select ¡®Security¡¯ in the navigation panel and under ¡°Signing in to Google,¡± select 2-Step Verification and then ¡®Get started¡¯.
Either way, you will be asked to login and select your mobile device linked to your account. Follow the on-screen steps to verify your phone number and whether you want to receive verification codes by text message or phone call.
Now, whenever a login attempt is made to your account, Google will send prompts to your device that allow you to simply click ¡°Yes¡± or ¡°No¡±. If that doesn¡¯t work for some reason, Google will send the verification code via a text message or phone call.
Overall, this app and system-based two-step verification is better than the SMS-based approach which can be hacked and is still widely used by banks.
Turns out, the phone networks as well as your phone companies are bad at security. Hackers can exploit vulnerabilities in your telecom network to listen to your calls, intercept texts and even trace your location.?
Your carrier provider, on the other hand, can be tricked into porting a phone number to a new device in what is called SIM swapping. But in that case, your device will be disconnected from the network and you¡¯d know that your phone number has been compromised.
However, hackers have been able to reroute text messages. And before you realise that someone else is actually getting your messages, they break into your online accounts that rely on texts for authentication.
?Therefore, for 2FA, experts recommend that you use authentication apps such as Google Authenticator, Microsoft Authenticator or Authy.