> Unfortunately google requires either their app or SMS. They dropped pure totp for some reason.
Gmail TOTP still works fine?
Re:Lastpass Security Incident
by richrichardsson on Thursday December 01, 2022 @05:31AM
(#33814531)
Yup, but it seems it will default to "click the notification on your phone" as soon as you've signed in on a phone. You need to click "try another way", even if you've explicitly told them that TOTP is your preferred default.
Re:Lastpass Security Incident
by CorrectHorseBat on Thursday December 01, 2022 @04:59AM
(#33814336)
If you first enable app or sms then you can add totp (that was my experience at least)
Re:Lastpass Security Incident
by FeistySkink on Thursday December 01, 2022 @05:09AM
(#33814400)
Also hardware keys work just fine with Google.
> Unfortunately google requires either their app or SMS. They dropped pure totp for some reason.
I use TOTP with my Google Account all the time. If you have a phone registered with that Google Account it will default to the push notification system first (it might even be possible to make this no longer the default, I'm not sure), but you can always click the button to switch to alternative 2FA options.
Re:Lastpass Security Incident
by goosesanta on Thursday December 01, 2022 @02:18PM
(#33821233)
> for some reason
Google plainly dropped totp wherever possible in order to confirm everyone's identity.
Totp was an open standard that didn't help them spy on anyone, and they regret releasing it bigtime.
>Unfortunately google requires either their app or SMS. They dropped pure totp for some reason.
You have to add a phone number, turn that on for 2fa.
Then you can add TOTP.
Then you can disable SMS.
SMS will still work for at least a week because fuck you.
It gets really annoying when you want to sign into $service on those machines, but you need to use a magic link. Because the you need to login into your gmail, which requires an additional 2fa (and you can’t receive sms in a building that has 6 stories but no femto cells).
Unfortunately google requires either their app or SMS. They dropped pure totp for some reason.
Awful experience.