{"id":610,"date":"2014-03-21T01:00:40","date_gmt":"2014-03-20T23:00:40","guid":{"rendered":"http:\/\/blog.prunk.si\/?p=610"},"modified":"2016-12-21T01:11:11","modified_gmt":"2016-12-20T23:11:11","slug":"2-way-authentication-on-google","status":"publish","type":"post","link":"https:\/\/blog.janprunk.com\/?p=610","title":{"rendered":"Two-step verification from Google"},"content":{"rendered":"<p>Google offers <a title=\"2 way authentication from Google\" href=\"http:\/\/nakedsecurity.sophos.com\/2011\/06\/02\/how-to-stop-your-gmail-account-being-hacked\/\" target=\"_blank\">Two-step verification<\/a>\u00c2\u00a0for some time now, but I have only discovered it recently, when my Gmail account notified me with the warning :<\/p>\n<ul>\n<li>\n<h1>State-sponsored attackers may be attempting to compromise your account<\/h1>\n<\/li>\n<\/ul>\n<p>The warning doesn&#8217;t say &#8220;which&#8221; state attackers and there don&#8217;t seem to be any information or logs from break-in attempts in the account, or if this is just a Google integrated default warning for many users to enable their Two-step verification. But a Two-step verification is usefull in many ways. Let me explain you why : It gives another layer on protecting your password and doesn&#8217;t compromise your account if that password gets stolen or revealed. Here is just a basic example &#8211; many of you have probably used a public computer on some occassion to log into Gmail to read your E-mails either on a journey or while being at some public place, where you can never tell if your password was captured or not. There are different methods for capturing your password, most basic ones would be with a keylogger device or software. You can never be secure enough in a public place if your computer is protected. With Two-step verification from Google, you add another layer of protection by enabling SMS text code or voice message to your mobile phone number, which is always different and unique. Just a warning that with this method your phone number will be verified and linked to your existing Google\/Gmail account ! Here is an article explaining how to make it work:<\/p>\n<ul>\n<li><a title=\"State--sponsored attack on Google\" href=\"http:\/\/nakedsecurity.sophos.com\/2012\/06\/06\/google-state-sponsored-attackers-may-be-attempting-to-compromise-your-account\/\" target=\"_blank\">Google&#8217;s warning<\/a><\/li>\n<li><a title=\"How to setup two way authentication\" href=\"http:\/\/nakedsecurity.sophos.com\/2011\/06\/02\/how-to-stop-your-gmail-account-being-hacked\/\" target=\"_blank\">How to setup Two-step verification on Google (text version)<\/a><\/li>\n<li><a title=\"Two-Way authentication\" href=\"https:\/\/www.youtube.com\/watch?v=zMabEyrtPRg\" target=\"_blank\">How to setup Two-step verification on Google (video version)<\/a><\/li>\n<li><a title=\"Two-factor authentication for websites\" href=\"http:\/\/lifehacker.com\/5938565\/heres-everywhere-you-should-enable-two-factor-authentication-right-now\" target=\"_blank\">How to setup Two-step verification for other social websites<\/a><\/li>\n<li><a title=\"Two-step verification Wikipedia\" href=\"http:\/\/en.wikipedia.org\/wiki\/Two-factor_authentication\" target=\"_blank\">Wikipedia about Two-step verification process<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Google offers Two-step verification\u00c2\u00a0for some time now, but I have only discovered it recently, when my Gmail account notified me with the warning : State-sponsored attackers may be attempting to compromise your account The warning doesn&#8217;t say &#8220;which&#8221; state attackers and there don&#8217;t seem to be any information or logs from break-in attempts in the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,19],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=\/wp\/v2\/posts\/610"}],"collection":[{"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=610"}],"version-history":[{"count":9,"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=\/wp\/v2\/posts\/610\/revisions"}],"predecessor-version":[{"id":619,"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=\/wp\/v2\/posts\/610\/revisions\/619"}],"wp:attachment":[{"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.janprunk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}