# Does Gmail have more security measures than most banks? **URL:** \ **Category:** Factual Questions\ **Created:** [August 2, 2017, 7:34am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614 "2017-08-02T07:34:45Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![cowardsflight](https://avatars.discourse-cdn.com/v4/letter/c/5f8ce5/32.png) [@cowardsflight](https://boards.straightdope.com/u/cowardsflight)\ **Post date:** [August 2, 2017, 7:34am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/1 "2017-08-02T07:34:45Z")
This is from anecdotal experience but it seems that the email service, Gmail accounts users are guaranteed more safety than online bank account users for many banks across the world. One of my former colleagues who lives in Canada got a visit from the local police after accessing a female acquaintance’s gmail account. He used a keylogger to record the details when she used a laptop of a friend who was clueless on computers and then after obtaining details and accessing her account, he looked through emails to ‘put himself’ i whatever activities she was in to have a greater chance of being with her :rolleyes:. Smart idea but it when wrong. She didn’t suspect anything at all until she received sign-in attempts which he could not delete that Google investigated and eventually forwarded to the local police. I’m not to sure what happened to him but despite not being charged, he definitely has had his life changed by more run-ins with the law. Conversely, I knew shithead kids in my school who improved themselves and were making more trips abroad than me but everyone knew it was because they were involved in something similar to the Canadian acquaintance; either recording the keystrokes that their desired victims typed on their bank details or various types of debit card skimming etc. What really gets me is that these guys were pretty dumb to but that was not at all a prison sentence for any of them. They were accessing accounts from London, Paris, New York, Moscow but the bank didn’t alert to sign-in’s from different I.P addresses like Google does even when it’s a different computer in the same city. They were able to take thousands of pounds. What’s the explanation for this? Are banks as they say only concerned about other companies/banks who steal from them but not their customers because they’re too busy raking in money? ---
**Author:** ![Yodalicious](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/yodalicious/32/8195_2.png) [@Yodalicious](https://boards.straightdope.com/u/Yodalicious)\ **Post date:** [August 2, 2017, 8:33am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/2 "2017-08-02T08:33:52Z")
I can’t definitively say yes, but it doesn’t surprise me that banks may be less secure. My bank doesn’t even offer two factor authentication. I play video games that at least offer 2FA. I know 2FA isn’t the best security out there, but it’s better than nothing. Sent from my SPH-L720T using Tapatalk ---
**Author:** ![tomndebb](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@tomndebb](https://boards.straightdope.com/u/tomndebb)\ **Post date:** [August 3, 2017, 3:06am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/3 "2017-08-03T03:06:49Z")
I suppose that this could tun into a debate, depending on the answers provided and the responses of other posters, but at the moment it looks more like a factual/GQ question. ---
**Author:** ![bob\_2](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bob_2/32/3341_2.png) [@bob\_2](https://boards.straightdope.com/u/bob_2)\ **Post date:** [August 3, 2017, 11:03am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/4 "2017-08-03T11:03:16Z")
I don’t use G-mail so I am not familiar with their security measures, but my bank, and AFAIK all UK banks take security very seriously. A key logger would not give you enough to hack my account as there are some drop-down boxes to click. I find it curious that rational people will happily carry substantial wads of currency on their person, but refuse to use internet banking. ---
**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\ **Post date:** [August 3, 2017, 12:36pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/5 "2017-08-03T12:36:58Z")
Certainly either has far more security than off-line banking. ---
**Author:** ![naita](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/naita/32/5862_2.png) [@naita](https://boards.straightdope.com/u/naita)\ **Post date:** [August 3, 2017, 1:18pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/6 "2017-08-03T13:18:45Z")
My bank requires a one time code generated by either a physical generator or an app on my phone (which can only be installed on the phone registered with the bank), plus a personal password. Every login also shows the last previous successful login attempt. I don’t know what kind of regime they have for following up on hacking attempts, as they are very rare and difficult to perform. ---
**Author:** ![Heracles](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/heracles/32/487_2.png) [@Heracles](https://boards.straightdope.com/u/Heracles)\ **Post date:** [August 3, 2017, 1:52pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/7 "2017-08-03T13:52:58Z")
I haven’t seen 2-factor authentication at Canadian institutions yet, including Tangerine and Desjardins. Some institutions offer a physical key generator, but only for commercial accounts. Anecdote: For several years, the _Banque de Montréal_ (BMO) Web site used this approach: 1- Type in the debit card number (optionally remembered) and click a button. 2- The site shows a pre-selected picture and phrase, and prompts for a password. 3- Type in the password (4 digits plus 2 letters) and click a button. So the passwords are pretty weak, but at least step 2 gives the user some assurance that the Web site is legit. They used this for their mobile app too, as I recall, but then they redesigned the mobile app, prompting for card number and password on the same page, skipping step 2. Last October (?), I got a message saying “October is online security month!”… and another saying “Because the mobile app doesn’t do it, you won’t need [step 2] on the Web site from now on either!”. :rolleyes: ---
**Author:** ![scr4](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@scr4](https://boards.straightdope.com/u/scr4)\ **Post date:** [August 3, 2017, 2:31pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/8 "2017-08-03T14:31:02Z")
I don’t think gmail _requires_ 2-factor authentication, though it is available and recommended. My banks all require 2-factor authentication (security code sent by e-mail or SMS) when you log in from a new computer. ---
**Author:** ![GusNSpot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gusnspot/32/436_2.png) [@GusNSpot](https://boards.straightdope.com/u/GusNSpot)\ **Post date:** [August 3, 2017, 5:14pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/9 "2017-08-03T17:14:21Z")
I don’t use debit cards. Bank shows every failed log in attempt My pocket can’t be scanned very easily for how much cash I have on me. Go ahead and try to pick my pocket. Bawahahaha Just heard a rumor two day ago that the strips in some of the new money can be used by scanning to see how much you have on you… Never heard that before. ( true or false? ) (( new DEA tool )) ---
**Author:** ![LionelHutz405](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lionelhutz405/32/536_2.png) [@LionelHutz405](https://boards.straightdope.com/u/LionelHutz405)\ **Post date:** [August 3, 2017, 7:08pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/10 "2017-08-03T19:08:26Z")
Google generates these sign-in attempt warnings all the time. Accessing your account while on vacation would do it. Buy a new phone and access your Gmail? It’s a new device so Google sends the warning. I think somebody is lying to you. There is no way Google would bother notifying the police and if they did, the police wouldn’t care. ---
**Author:** ![cowardsflight](https://avatars.discourse-cdn.com/v4/letter/c/5f8ce5/32.png) [@cowardsflight](https://boards.straightdope.com/u/cowardsflight)\ **Post date:** [August 3, 2017, 7:15pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/11 "2017-08-03T19:15:49Z")
> [@LionelHutz405](#): > > I think somebody is lying to you. There is no way Google would bother notifying the police and if they did, the police wouldn’t care. Really? Are you sure about that? ---
**Author:** ![Richard\_Parker](https://avatars.discourse-cdn.com/v4/letter/r/35a633/32.png) [@Richard\_Parker](https://boards.straightdope.com/u/Richard_Parker)\ **Post date:** [August 3, 2017, 7:23pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/12 "2017-08-03T19:23:32Z")
Yes. Google provides much more and better security for online activities than most banks. Indeed, Google provides better online security that pretty much anyone else, period. But banks are especially bad. ---
**Author:** ![Flyer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/flyer/32/7298_2.png) [@Flyer](https://boards.straightdope.com/u/Flyer)\ **Post date:** [August 3, 2017, 11:21pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/13 "2017-08-03T23:21:33Z")
> [@bob\_2](#): > > I don’t use G-mail so I am not familiar with their security measures, but my bank, and AFAIK all UK banks take security very seriously. A key logger would not give you enough to hack my account as there are some drop-down boxes to click. > > I find it curious that rational people will happily carry substantial wads of currency on their person, but refuse to use internet banking. I find it quite bizarre that a lot of people these days depend exclusively on internet connectivity to do important and possibly time-sensitive things like banking. Having cash on hand is the functional equivalent of backing up your computer files. ---
**Author:** ![Ike\_Witt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ike_witt/32/283_2.png) [@Ike\_Witt](https://boards.straightdope.com/u/Ike_Witt)\ **Post date:** [August 3, 2017, 11:47pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/14 "2017-08-03T23:47:25Z")
> [@Richard\_Parker](#): > > Google provides better online security that pretty much anyone else, period. But banks are especially bad. ISTM, that Blizzard has pretty decent security for accounts. ---
**Author:** ![Wolf333](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wolf333/32/3460_2.png) [@Wolf333](https://boards.straightdope.com/u/Wolf333)\ **Post date:** [August 4, 2017, 12:54am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/15 "2017-08-04T00:54:02Z")
I have 2FA for my Steam, Blizzard, Gmail, Hotmail accounts, but my bank does not offer it. ---
**Author:** ![Richard\_Parker](https://avatars.discourse-cdn.com/v4/letter/r/35a633/32.png) [@Richard\_Parker](https://boards.straightdope.com/u/Richard_Parker)\ **Post date:** [August 4, 2017, 1:56am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/16 "2017-08-04T01:56:03Z")
Security has lots of factors: Options to help you protect your password and secure login Procedures to prevent brute force attacks Monitoring of servers to detect intrusion Research and updating to prevent exploits And lots else besides. Only Google is really rocking all of that. ---
**Author:** ![S3rpent](https://avatars.discourse-cdn.com/v4/letter/s/f1d935/32.png) [@S3rpent](https://boards.straightdope.com/u/S3rpent)\ **Post date:** [August 4, 2017, 6:48am UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/17 "2017-08-04T06:48:49Z")
Dynamic internet based companies like Google have a much easier time implementing cutting edge security than formal institutions like banks, because Google literally is an internet related company, whereas banks simply have an online portal. Also with the (probably) more red tape to try to match the legal standards for being a bank, they stagnate and simply cant keep up. ---
**Author:** ![cowardsflight](https://avatars.discourse-cdn.com/v4/letter/c/5f8ce5/32.png) [@cowardsflight](https://boards.straightdope.com/u/cowardsflight)\ **Post date:** [August 4, 2017, 12:58pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/18 "2017-08-04T12:58:59Z")
lol…this is interesting. From the posts in the thread, Canadians and Americans definitely have better security measures than the banks here in the UK. I just got a scam text an hour ago telling me to log in. The site at first glance appeared incredibly genuine and had I not gone through my rudimentary experiences from watching documentaries and articles on various scams, I would have fallen for it. Could someone explain how these guys are able to do it? I know it’s definitely a scam but the text number they used was the genuine one from my bank even though they said when I called them today and always on their site that they never ask for info. How can they fake text numbers? ---
**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\ **Post date:** [August 4, 2017, 1:51pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/19 "2017-08-04T13:51:23Z")
> [@Richard\_Parker](#): > > Security has lots of factors: > > Options to help you protect your password and secure login > Procedures to prevent brute force attacks > Monitoring of servers to detect intrusion > Research and updating to prevent exploits > > And lots else besides. Only Google is really rocking all of that. IMO this is the punchline. It was scary to read 14 answers in GQ that each confused “how the end user logs in” with “security” before \*\*RP \*\*pointed this out. The login process is about 0.5% of what “security” entails. ---
**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\ **Post date:** [August 4, 2017, 9:50pm UTC](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614/20 "2017-08-04T21:50:24Z")
No, Google doesn’t require 2FA. Which is really great. More and more sites are catching on that 2FA isn’t really secure so it is becoming increasingly [deprecated](https://techcrunch.com/2016/07/25/nist-declares-the-age-of-sms-based-2-factor-authentication-over/). It will eventually end up in the security theater bit bucket. If you have site that requires it, watch out. [Next page](https://boards.straightdope.com/t/does-gmail-have-more-security-measures-than-most-banks/792614.md?page=2)