Re:Ask HN: Gmail account security
by Andrew_nenakhov on Sunday January 23, 2022 @05:59PM
(#30051473)
Actually, I specifically declined setting up a recovery phone number because I accessed it from the location where receiving codes would be impossible on my phones. I always accessed it from the same IP using my own VPN server, entered the correct password, and still Google decided that they are 'not sure that it is not really me, try again later'. No thanks.
[ Parent
| on HN ]
What about downloaded back up codes ? Phone push approval? U2f key? Authenticator app? Can't imagine complaining about being shut out if you didn't have at least one or all of these set up. Google even nags you about setting these up.
Re:Ask HN: Gmail account security
by Dylan16807 on Monday January 24, 2022 @05:59AM
(#30056004)
Why can't you imagine that? This gatekeeping you're doing is rude and doesn't make sense. 2FA's very purpose is to increase shut outs when enabled.
Re:Ask HN: Gmail account security
by smileybarry on Monday January 24, 2022 @10:36AM
(#30058910)
It might be 2FA's very purpose, but I've found that a 2FA-less account is a lot more distrusting of logins. Some of my relatives don't have 2FA set up and they got more "verify it's really you" prompts compared to my personal MFA'd account.
Re:Ask HN: Gmail account security
by Dylan16807 on Monday January 24, 2022 @10:42AM
(#30058993)
Because Google is abusing the concept.