Google forcing 2 step verification starting Oct 28

All my Android devices are setup on my personal gmail and phone number. I used add another account to link in my work gmail.

I didn’t realize it exposed my phone.

I plan to delete Gmail work account from my Tablet and old phone.

Only read gmail on one phone.

There’s no need for all my devices to link to work.

Practically everything digital is going two-step verification. Your choice will be to join it, or be left out.

2 step Verification relies on your phone number. They text your phone.

What happens if you change service providers and they won’t let you move your number?

Thankfully I haven’t changed cell numbers. It must be quite a headache dealing with Google.

I didn’t put much thought into my gmail name. It’s way too long and a pain to type. I won’t change now because it’s tangled up with google.

I have 2-factor on and this is my experience too. It’s less intrusive than how it used to be. On a new phone, computer, or browser I have to enter my password and then click a 'yes it was me ’ on any of my other devices.

As others have said, you can also get a text message code or phone call code. It’s not as convenient as the pop-up, but it works.

I don’t think there is an impact except when using a new device. It’s a lot more secure too. If someone gets your password they can’t just log in.

Not exactly. It relies on you being able to access your Google account from a previously recognized device or a phone. For example if you get a new computer, you can verify your new computer with your old one.

You can also print out or save some one-time codes. If you don’t have any of your previous devices or your old mobile number you can use one of these codes.

Sure, 2-step is more hassle, but a lot more secure. I think it is not too onerous for the common use-case and still supports the uncommon ones.

I use two-step verification whenever possible, and taught my kids to so the same. There are generally multiple options for the second step (not JUST phone/text) that can be set up. If you do have an Android phone, though, it just puts a prompt on the screen asking if you are trying to log in on LOCATION, and you click yes and you are on your way!

I would recommend enabling MFA* also. For better security. Lots of hackers out there. But recently Google MFA ticked me off, because Google required that I verify on my tablet. I haven’t used my tablet in a very long time. I never use it.

* — multi factor authentication

I can live with that.

I was worried Android wouldn’t automatically log into Google when its powered on.

Of course, a new phone requires manually logging in during setup. That will become 2 step verification.

Google’s model doesn’t. It simply requires that you have either an Android phone where you’ve logged in. (Not sure how it works on Apple devices).

My experience is that you don’t actually use your phone all that much—only when you log in to Google from a new device.

My concern is just the situation that @Darren_Garrison describes. People may want access to accounts where they don’t have current access to any phone that is logged in. This seems to be a recipe for trouble. (I’m assuming they at least won’t activate this automatically for people who don’t have phones. That’s what I believe the plan is: only to turn it on for people who have all the required parts set up.)

I do wonder how backup emails interact with all of this.

I get notifications to the Google app installed on my iDevices.

I took corrective action. Open gmail, press user Icon in upper right corner and manage accounts.

I deleted my work email account from my Tablet and my old 3G phone that I use with wi-fi.

My current phone is the only device that connects to work gmail.

More people need to be aware of this issue.

Years ago, I would open my work email with a web browser. The Gmail App is so much more convenient.

Sorry if I was unclear.

I already have multi-factor enabled on my Google accounts. I needed the second factor for the initial device setup, but not since.

As for methods allowed by Google:

I currently have 4 physical keys, 6 devices for Google prompts, two Authenticator apps as my second factors. I can use any of those plus my password to access my account.

That is on my personal account, not a Google Workspaces account.

In my experience, you get a prompt before it takes over your phone. You have to install an app or create a work profile. But they have been changing the behavior a lot so maybe it has changed.

I also forgot - I keep a list of one-time codes in my wallet in case I need to access my email from anywhere. This was from before I got a smartphone, but I assume the list will still work. Those without such a device can just write down those one-time codes, and if they run out, generate a new set of them.

I have two gmail accounts, buy I don’t access them on my mobile phone. Just my Mac at home and work.

I dislike this two step verification process. What happens when I’m unable to get a text? What happens when the text doesn’t come through in time and I have to keep asking for one and if I get too many it stops sending them and locks me out for awhile?

My work computer sometimes thinks it’s in Atlantic City, other times Philadelphia depending on which server I get connected to. Google sometimes decides that since it doesn’t know my location it will log me out. It will then ask me to turn on 2 step verification but I refuse. What happens when I’m in a place where I don’t get good texts and I can not get in to my account?

What happens when I’m in a different country and my credit card gets a fraud alert, which happened to me last month in Greece? I tried to log in to my account, but because it saw I was in Greece it refused to let me log in unless I allowed them to text me. Well I can’t get texts in other countries so I’m now without one card. My normal bank seems to have a real problem with me going over seas and likes to stop my credit card and debit card from being used, so I was almost stuck with no money. Luckily it was my last day there and I had cash, but it would have sucked otherwise.

So far, for me, this two step process has been more of a pain than anything.

All security of every nature is an obstacle to convenience & productivity. It only pays off when it prevents a far worse disaster, like all your money being stolen. Most of us will never know how much any given security effort benefits us personally in bad things not happening to us personally.

It’s the eternal dilemma of security, ranging from locked front doors at home to needing 2FA with an iris scan to access your email.

They can’t stop you from moving your number (look up “local number portability”). They can apparently charge you for it, but I think that is very rare and I would guess you could probably get the company you are changing to to pay for it.

Sometime this fall our university is going to require 2 step verification for logging into Outlook, so that’s going to be fun.

I shut my computer down every night, so will I need to log into Outlook daily now, or just when I change my password? No idea.