Google rolled out an optional “2-step verification” security feature to all Gmail users making their accounts more secure by helping to verify the real ownership of the account. Until now the second step had been available only to Google’s Apps customers.
Two-step verification requires two independent factors for authentication: your password, plus a secret code obtained using your phone. This adds an extra layer of security and prevention from having your account hijacked as a hacker would need access to both of these factors to access your account.
“Your Gmail account, your photos, your private documents — if you reuse the same password on multiple sites and one of those sites gets hacked, or your password is conned out of you directly through a phishing scam, it can be used to access some of your most closely-held information,” said Google.
Setting up 2-step verification will take you up to 15 minutes and it includes establishing a second, backup phone number to send the code to in case an access to the primary phone is lost. Google will send a unique code to the user via text message, an automated call, or the user can use an app called ‘Google Authenticator’ on Android, BlackBerry and iPhone to generate unique codes.
„If you like, you can always choose a “Remember verification for this computer for 30 days” option, and you won’t need to re-enter a code for another 30 days. You can also set up one-time application-specific passwords to sign in to your account from non-browser based apps designed to only ask for a password, and can’t prompt for the code,“ said Nishit Shah, Google Security product manager.
2-setp verification drastically improves the security of Google Accounts as it is a combination of something you know—your username and password—and something that only you have—your phone.