Google Makes Implementing 2FA Simpler
Security Boulevard, Tuesday, May 7th, 2024
Google is making it easier for users to implement two-factor authentication (2FA) for their personal or business Workspace accounts. This is part of the company's larger push for users to adopt stronger verification methods, whether it's multi-factor authentication (MFA) or passwordless tools like biometrics or passkeys.
The changes to what Google also calls 2-Step Verification (2SV) that were unveiled this week include the ability to add 'second step methods,' such as Google Authenticator or a hardware security key, before turning on 2SV. Previously, users needed to enable 2SV with a phone number before they could add Authenticator.
'This is particularly helpful for organizations using Google Authenticator (or other equivalent time-based one-time password (TOTP) apps),' the company wrote. Those using hardware security keys can either register a FIDO1 credential on the key even if it's FIDO2-capable or register a FIDO2 credential on the key, which will require users to use the key's PIN for local verification, creating a passkey on the security key.