Two-Factor Authentication

Posted on sam. 01 février 2014 in technical

Login security

Extra security

Some applications require extra set of security because if someone get access to it, things can get ugly for you. After reading this sad yet interesting story, I was astonished of how you can put a mess in someone's life by getting access to his/her mail account. Not only you can change its password, you also can change the password of all applications linked to the hijacked address mail. For instance you can virtually restart all the password of the associated social media. (e.g: Facebook)

Two-Factor Authentication

2FA try to solve this huge chink by applying a second identification step. You've surely already experienced 2FA through online paiement. Banks widely use it by sending you a code to your mobile phone to enter it inside the paiement website to finalize the transaction. Thus, the bank strengthen the identification process by asking you to make a "proof of work" only you can do. Even if the attacker got your credit card numbers he won't be able to get the paiement done without access to your mobile phone.

This useful system is also available in mail clients such as gmail. I strongly advice you to enable it since it will reinforce the overall security of your mails'access. In the following section I describe the different steps to enable it in Gmail.

Here a small scheme to illustrate the different steps:
2FA principle

HOW-TO

In your account setting go to the security menu to see a 2-step verification link.... No I'm kidding. Google explain it better than I do :) .
Here the link. It's very easy and can be done in a matter of minutes. Doing this can't hurt.
For those who blame the fact to rely on mobile phone, several substitutes are explained.

N.B: As you may notice we can use interchangeably "two step verification" and "two-factor authentication"