Google to make Apps accounts more secure with two-factor authentication

It's a bit like the dedicated RSA SecurID fobs some enterprises use for VPN authentication. Sign in to your Google account via the usual login screen and you're then prompted to verify your account. Launch the Google Authenicator app on your smartphone and enter the code it displays to complete the sign-in process. Google Authenticator will be available for Android (image after the break), Blackberry, and iPhone users. Don't have a fancy smartphone? No problem -- Google can also call you or send an SMS message to provide you with a code.
Apps administrators can currently enable two-factor authentication in their control panels. Free apps domains will receive the feature in the coming months -- but here's hoping Google also rolls this out as an option in Gmail. My password is plenty strong, but why not add a little extra protection if it's available?
[Google Enterprise blog]













Comments
5
Subscribe to commentsErez ZukermanSep 20th 2010 8:19AM
Cool app, and seems like something I would use for my own Apps account! But what happens when I lose my smartphone?
drewSep 20th 2010 3:18PM
Erez, while setting up two-step verification, a list of single-use codes is provided that you can print out. You can then leave this list somewhere safe and use them in case you lose your phone.
http://www.google.com/support/accounts/bin/answer.py?answer=185839
(Disclaimer: I work on the Android app.)
Erez ZukermanSep 20th 2010 3:36PM
Cool, thanks Drew!
F-ZeroSep 21st 2010 12:48AM
isn't that a little redundant?
timNov 15th 2010 9:49PM
GMail already rejects my password for no apparent reason every couple weeks. This sounds like another way for it to keep me from my email. :-(