[Oni]

2FA will be the new default. Will likely send push notifications to your phone.

Enabling two-factor authentication (2FA) on a Google account requires someone who is proactive about account security. Users have to log in, dig through the settings, and tick the right boxes. Of the billions of Google accounts out there, the uptake on 2FA is probably not that high, and Google is tired of it.

Yesterday, for "World Password Day," Google announced a very bold move for account security. "Soon," the company says, it will start "automatically enrolling" users in 2FA, provided their accounts are appropriately configured. Google doesn't go into detail about what "appropriately configured" means, but it sounds like anyone who can have 2FA enabled will have 2FA enabled soon. Google's preferred 2FA method is the "Google Prompt," a notification Google pushes to your phone when you're attempting to sign in. Rather than requiring you to type in a clunky code, the Google Prompt provides a simple "yes/no" check, making 2FA easier than ever.

On Android, Google Prompt is a full-screen pop-up built into every device as part of Google Play Services, so that's easy. On iOS, Google Prompt requests for your account can be received by the Google Search app, the Gmail app, or the dedicated Google Smart Lock app. It sounds like everyone meeting these requirements will soon be enrolled in 2FA.

Most users stick with the default settings, and soon, the default setting for 2FA will be automatic enrollment. Non-tech-savvy users are the most likely to have not enabled 2FA on their accounts, so hopefully, they'll still be able to figure out how to log in when the process suddenly changes. Google could also potentially lock someone out of an account if the company automatically enrolls a user in 2FA and the user's device setup can't actually support it. Hopefully, the first attempt includes some kind of wiggle room or consent.

Read More: https://arstechnica.com/gadgets/2021/05/...rs-in-2fa/

[Spooky]

I like this idea. With the Yahoo Logs being sold and having tons of personal info like SSN, Birth Certificates and more.

2FA is unfortunately the only way to go to fully protect your emails, or use P2P encryption like Protonmail.

[mothered]

In my view, this Is a very good move by Google.

Although 2FA may be somewhat Inconvenient for some users (having their cell phone on hand to retrieve the verification code and enter It In their other device), It will significantly Increase the security of one's account.

[Oni]

In my view, this Is a very good move by Google.

somewhat Inconvenient for some users (having their cell phone on hand to retrieve the verification code and enter It In their other device)

In the event someone's phone is physically stolen as well. Some companies have no alternative for regaining access.

[Mr.Kurd]

I have been using this for one year actually.. Once I used browser based VPN while accessing Gmail, automatically Gmail blocked my access and forced me to verify 2FA then directly reseting password also it disabled 2FA so had to renable them again.

[mothered]

In the event someone's phone is physically stolen as well.

Hence the Importance of locking the phone with a code/password.