https://arstechnica.com/gadgets/2021/05/google-will-soon-start-automatically-enrolling-users-in-2fa/

Skip to main content
 

  * Biz & IT
  * Tech
  * Science
  * Policy
  * Cars
  * Gaming & Culture
  * Store
  * Forums

Subscribe
 
[                    ]
Close
 

Navigate

  * Store
  * Subscribe
  * Videos
  * Features
  * Reviews

  * RSS Feeds
  * Mobile Site

  * About Ars
  * Staff Directory
  * Contact Us

  * Advertise with Ars
  * Reprints

Filter by topic

  * Biz & IT
  * Tech
  * Science
  * Policy
  * Cars
  * Gaming & Culture
  * Store
  * Forums

Settings

Front page layout


Grid

List

Site theme

Black on white
White on black
Sign in

Comment activity

Sign up or login to join the discussions!

[                    ] [                    ] [Submit] [ ] Stay
logged in | Having trouble? 
Sign up to comment and more Sign up

Google: "We've turned on 2FA. Deal with it." --

Google wants people to use 2FA, so it's just going to turn it on for
them

Non-tech-savvy users always use the defaults, and the default will
soon be 2FA.

Ron Amadeo - May 7, 2021 4:35 pm UTC

Cartoon image of laptop and a hand holding a smartphone illustrate
multifactor authentication.
Enlarge
Getty Images

reader comments

280 with 141 posters participating

Share this story

  * Share on Facebook
  * Share on Twitter
  * Share on Reddit

Enabling two-factor authentication (2FA) on a Google account requires
someone who is proactive about account security. Users have to log
in, dig through the settings, and tick the right boxes. Of the
billions of Google accounts out there, the uptake on 2FA is probably
not that high, and Google is tired of it.

Yesterday, for "World Password Day," Google announced a very bold
move for account security. "Soon," the company says, it will start
"automatically enrolling" users in 2FA, provided their accounts are
appropriately configured. Google doesn't go into detail about what
"appropriately configured" means, but it sounds like anyone who can
have 2FA enabled will have 2FA enabled soon. Google's preferred 2FA
method is the "Google Prompt," a notification Google pushes to your
phone when you're attempting to sign in. Rather than requiring you to
type in a clunky code, the Google Prompt provides a simple "yes/no"
check, making 2FA easier than ever.

On Android, Google Prompt is a full-screen pop-up built into every
device as part of Google Play Services, so that's easy. On iOS,
Google Prompt requests for your account can be received by the Google
Search app, the Gmail app, or the dedicated Google Smart Lock app. It
sounds like everyone meeting these requirements will soon be enrolled
in 2FA.

Most users stick with the default settings, and soon, the default
setting for 2FA will be automatic enrollment. Non-tech-savvy users
are the most likely to have not enabled 2FA on their accounts, so
hopefully, they'll still be able to figure out how to log in when the
process suddenly changes. Google could also potentially lock someone
out of an account if the company automatically enrolls a user in 2FA
and the user's device setup can't actually support it. Hopefully, the
first attempt includes some kind of wiggle room or consent.

reader comments

280 with 141 posters participating

Share this story

  * Share on Facebook
  * Share on Twitter
  * Share on Reddit

 
Ron Amadeo Ron is the Reviews Editor at Ars Technica, where he
specializes in Android OS and Google products. He is always on the
hunt for a new gadget and loves to rip things apart to see how they
work. Email ron@arstechnica.com // Twitter @RonAmadeo
Advertisement

You must login or create an account to comment.

Channel Ars Technica

- Previous story Next story -

Related Stories

Sponsored Stories

Powered by

Today on Ars

  * Store
  * Subscribe
  * About Us
  * RSS Feeds
  * View Mobile Site

  * Contact Us
  * Staff
  * Advertise with us
  * Reprints

Newsletter Signup

Join the Ars Orbital Transmission mailing list to get weekly updates
delivered to your inbox.

Sign me up -
 

CNMN Collection
WIRED Media Group
(c) 2021 Conde Nast. All rights reserved. Use of and/or registration on
any portion of this site constitutes acceptance of our User Agreement
(updated 1/1/20) and Privacy Policy and Cookie Statement (updated 1/1
/20) and Ars Technica Addendum (effective 8/21/2018). Ars may earn
compensation on sales from links on this site. Read our affiliate
link policy.
Your California Privacy Rights | Do Not Sell My Personal Information
The material on this site may not be reproduced, distributed,
transmitted, cached or otherwise used, except with the prior written
permission of Conde Nast.
Ad Choices