Most of us have a Google account that we use to access Gmail, YouTube, Search, and other Google products. Also, we’re still signed in to our Google account on our laptops and/or desktops. Why? Because we think it is safe.
But what if you want to log into your Google account on a public PC or a friend’s computer? More importantly, how do you protect your account from being logged in without your permission?
While 2FA or two-factor authentication is a popular way to protect hackers from accessing your account, Google has gone ahead and made things simpler, faster, and more secure. You can now use your Android phone as a security key to sign in to your Google account on any computer. That’s called 2SV or two-step verification system.
Let’s see how it works and how you can implement it.
1. Prerequisites
There are a few things you will need before you can make this work. You need a smartphone running Android 7.0 (Nougat) or later. You will also need to download and install Chrome on this smartphone and sign in to both Android and Chrome with the same Google account.
Then you’ll need a computer (barless OS) with a Chrome browser where you’re trying to access a Google-owned service like Gmail or YouTube.
2. Activate 2SV
Click the link below to access My Account. Sign in with your preferred Google ID here. Once in, click Security in the left pane of the window. Here, under the heading Sign in to Google, you’ll find some options like 2-step verification and ‘Use your phone to sign in’.
We’ll first turn on the Google prompt and see how it works, so let’s click on the first option. Click Get Started on the next page.
At this point, you will be asked to re-enter your Google account password for security reasons. You will now see a list of all the Android phones connected to this Google ID. If you don’t see your device, click the Don’t see your device link.
Click on the Try it now link and you will immediately get a pop-up on your Android smartphone.
That Google prompt contains information like your email ID, the device operating system trying to access your account, your location, time, and two easy-to-understand options. You can allow or deny access. That’s much faster and simpler than entering a 2FA code with the Google Authenticator app. Now go back and click on the ‘Use phone to sign in’ option again. This time, you will see different options.
Click the Set It Up option. Re-enter your Google password. Make sure you have selected the correct Android phone from the drop-down menu and that your phone has a screen lock. Why? Without a screen lock, anyone could steal your phone and use it to sign in with Google’s prompts. Your phone also needs to be locked and secure. Click Next when ready.
Now, Google will run a fake simulation where you will pretend to be logged into your Google account with your credentials. Follow the drill bits and enter the login details.
You should now see a reminder on your phone. It will be a little different as this is a mock exercise to help you learn the ropes.
There are no location or OS details at this time. Click Yes to continue the rehearsal.
You’ll be told that Google prompts work, but there’s one last step to work through. You will have to Enable this feature.
If you own a Google Pixel 3, you can respond to Google prompts by pressing and holding the volume down button. That’s because Pixel phones are equipped with the Titan M Security chip, which stores FIDO credentials. Looks like Google has taken BlackBerry. Too bad they’re not in the race anymore. I still miss my Bold 2!
3. Lost access to the phone
So what happens when you don’t have access to your smartphone? There can be many reasons behind it like the battery is dead, the phone is stolen or your kid doesn’t return it to you. Well, you can’t sign in to your Google account with prompts. However, you can log in with your password.
Just select the Try another alternative option at the bottom to sign in with your password or backup code. In case your phone is stolen, you can rest assured that no one else will be able to use Google prompt because the screen lock is present. That’s why it’s listed as a prerequisite at setup time.
If you have two smartphones, you can set up a backup number to receive text or voice messages that can be used to sign in instead of reminders. You’ll see an option to add it just below the Google prompt.
In the same screen, if you scroll a bit further, you can also set up 2FA using an authenticator app of your choice, using a USB-based security key like Yubikey, and taking note of the backup code in case of an emergency . The last thing should be written on a piece of paper and kept in a safe place.
Code security
I recommend keeping your backup codes in a safe place in case of an emergency. You can now sign in to any Google service with your Android smartphone as a security device. As a physical device, it adds an extra layer of security via a password and is more convenient than using 2FA codes.
Next: Do you use a Windows laptop/computer? Here are three Windows 10 apps to generate 2FA codes for other websites/apps.
Categories: How to
Source: thpttranhungdao.edu.vn/en/
