My wife was typing out an email in her Gmail account last night when her screen changed and a message popped up saying she needed to verify her Gmail account. This isn’t unusual, but instead of sending a verification code to her phone, it sent a two digit verification code to her YouTube. I’ve never seen this before. Since when does Google/Gmail send verifications via YouTube?
I’ve had something like that on YouTube (which uses google/gmail accounts for authentication), but not really sure what you mean by it sending the verification to her YouTube - where would it appear on YouTube? There is no mailbox or direct messaging feature on YouTube, as far as I can tell.
Authentication requests like this out of the blue can sometimes indicate that someone else somewhere is trying (and failing) to hack your account; that is: lots of failed logins elsewhere, so Google decides your account is in an ‘alert’ state and makes you authenticate with 2FA, to be sure you are you (or something along those lines).
Google owns Youtube and uses the Youtube app to verify your Google account.
It’s pretty normal.
To answer Mangetout’s point - Google uses this method of verification via a notification using the Youtube app.
This definitely screams “SCAM!!!”, and @Mangetout is the king of scam-busting 'round here. Of course it could very well be legit because I don’t pretend to have any deep understanding of Google/YouTube’s authentification systems.
I think as long as you know you’re definitely within the Google/YouTube domain (and not some cleverly crafted lookalike page), it’s pretty safe to comply with their requests for re-authentication. I’ve had it pop up quite a few times.