Do you ever use the same password for multiple
websites? Do you ever sign in to Google Mail from a public or shared computer? Such actions
weaken your password and make it easier to steal. Google now offers 2-step verification,
an optional security feature that helps protect your account even if your password is stolen
or cracked. This new feature helps improve security because signing in requires 2 things
— something you know — your password — and something you have — your phone. It’s much
like what you might see on your banking website. With 2-step verification, you'll get a short
numeric code — known as a verification code — on your phone. You'll then enter this in
addition to your username and password when you sign in.
Let’s take a look at how you’ll sign in with 2-step verification.
After you sign in
with your username and password, Google will ask you for a verification code.
If you chose to receive a text or voice message when you set up 2-step verification, Google
will then send it to you on your phone. If you’re an Android, BlackBerry, or iPhone
user, you can also choose to generate a code on your phone using the Google Authenticator
app. Enter the code from your phone.
If you trust this computer you can check this box and you won’t be asked for another verification
code for 30 days. To set up 2-step verification, sign in to
your Google Account and go to your Account Settings page. Then, click "Using 2-step verification."
On the next screen, click "Set up 2-step verification." Follow the directions on your screen to choose
how to receive 2-step verification codes. You can receive your verification code in
an SMS text message, in a voice call to your landline or mobile phone, or by generating
a code using the free Google Authenticator app on your Android,
BlackBerry, iPhone, iPad, or iPod Touch. But what if your phone is unavailable, lost,
or stolen? Next you’ll add two backup options for receiving verification codes.
Write down or print your backup verification codes.
You can use these in case your phone is not available or if you are traveling.
Keep them in a safe and accessible place.
You’ll also need to add a backup phone that
you can use if you lose access to your primary phone. This can be a work or home phone, or
the phone of someone you trust, like a friend or family member.
2-step verification protects your Google Account whenever you sign in from a web browser. However,
devices and applications — like smartphones, the Picasa desktop application, and Microsoft
Outlook — can't ask you for verification codes, only your username and password.
In order to help keep these applications safe, you’ll need to use a special password, called
an application-specific password, instead of your regular account password. Application-specific
passwords are generated by Google upon your request, and you do not need to remember them
since you should only need to enter them once! To illustrate, let's set up the Mail app on
an iPhone using an application-specific password.
First you need to create an application-specific
password. Go to your Account Settings page and click "Authorizing applications & sites."
Enter the name of the application this password is for — in this case, "Gmail on my iPhone."
Then, click generate. Enter the application-specific password on
your iPhone … And you’re done! We know application-specific passwords are
long and hard to remember — that's why you don't have to! You should only need to enter
these passwords once per application or device, and you can always revoke and generate a new
password if needed. Thanks for trying 2-step verification and
kudos to you for taking extra steps to protect your account!.
