News for hackers. Stuff that matters.

A comment on Have I Been Pwned? Data breach master list with API. Parent comment

Re:Have I Been Pwned? Data breach master list with API by schoen on Monday March 14, 2016 @05:29PM (#11285711)
> is that pretty much all I should be doing at this point?

Google also offers two-factor authentication; if you're willing to bear the extra inconvenience, it's one of the biggest possible security wins.

https://www.google.com/landing/2step/

[ Parent | on HN ]
Re:Have I Been Pwned? Data breach master list with API by tyre on Monday March 14, 2016 @08:17PM (#11286580)
To add to this, it isn't too bad of an inconvenience. You can remember a device for 30 days, so you take an extra 20 seconds 12 times per year.
[ Parent | on HN ]
Re:Have I Been Pwned? Data breach master list with API by mkopinsky on Monday March 14, 2016 @09:52PM (#11286947)
I complete a Google 2FA much less than once a month. I think the 2FA cookie must live for a month, but my login cookie lasts for much more than that.

On a new device, I do of course need the 2FA token.

[ Parent | on HN ]