Gmail prompt to provide phone number sounds like a threat

  • nbailey@lemmy.ca
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    6
    ·
    1 year ago

    Yeah, this has nothing to do with encryption, it’s because they refuse to have a support division that would be able to get people back into their accounts.

    • stratoscaster@lemmy.zip
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      2
      ·
      1 year ago

      What? No, that’s the whole point of 2FA. There is literally no other way to verify authorization otherwise because it’s by-default incapable of verifying identity.

      Knowing the previous password doesn’t help because those are often found in password dumps.

      This is true of any email service.

      • Madlaine@feddit.de
        link
        fedilink
        arrow-up
        8
        arrow-down
        1
        ·
        1 year ago

        2FA is just a second password and has nothing to do with encryption. Can simply be removed.

        They could bypass this authentication without problems, if they want. I lost my phone and my google business account got restored regardless of 2FA. It’s just a button for the support. The problem is the identification, especially of private customers (dunno if they would even do that).

        Encryption passwords aren’t time-based either, they must be static.