Protecting Your Google Account From Hackers by Using Two Step Verification
By skear
Having your Google account compromised by hackers can be a nightmare. By gaining access to your account hackers can access all of the Google products you use.
Can you imagine losing access to Gmail, Youtube, Google+, and Adsense because one password was compromised?
Two protect my Google account from being hacked I use Google's two step verification process.
The two step system requires me to have access to a code generated using my smart phone as well as my username and password in order to log into my account.
Even if hackers discover my password it's useless to them unless they steal my phone as well.
In this hub I'll show you how to set up the additional security for your own account.
How Two Step Authentication Works
Here is the basic process for using the two step system.
- Complete the setup process and register a phone - Google supports the use of any Android device, iPhone, iPad, iPod Touch , or Blackberry phone for generating authentication codes.
- Begin signing into your Google account using verification codes - After you complete the setup process Google will prompt you to enter a verification code after you enter your password. If you want you can choose to "remember a computer" and you will only need to enter a code ever 30 days on the same computer.
- Setup application specific passwords - If you access your Gmail through outlook or via an app on your phone you will need to create special unique passwords for those clients. This step is nessasary because some applications like Outlook cannot prompt you for a verification code.
Download the Google Authenticator App
In order to start using two step verification download the Google Authenticator app to your phone.
Since I have a Samsung Infuse 4G phone I'm going to show you how to download and run the authenticator for Android OS.
If you don't have an Android phone check out Google's guide for installing it using on an iPhone or Blackberry.
- Search for 'Google Authenticator' in the Android market place.
- Download the app and install it on your phone.
- Select 'Scan a barcode'
If you don't have a barcode scanner installed then you the app will direct you to download and install the Zxing barcode scanner. If you already have one installed you can skip to the next section below.
Starting the Account Setup Process
After you have installed the authentication app on your phone you will need to sign into the 2 step verification settings page from your computer.
Click on 'Start Setup' to begin the process.
Choosing a Device to Display Codes
On the next page select the device that you want to create codes with. In my case I selected Android smart phone from the list of choices.
if you don't have a smart phone that can run the authentictator app then you can still use the 2-step system, just select text message or voice call.
When you select Android from the list a QR barcode will be displayed on your computer. Go back to the Google Authenticator app on your phone and use the scan code feature to read the code on your computer screen. Once the code is accepted your phone is linked to your account.
Backup Authentication Methods
Adding backup methods for authenticating your account is very important in case something happens to your phone. Google provides two different options for signing into your account if your primary phone is unavailable.
- Printable Backup Codes - Store them in your wallet for easy access. Each code on the backup sheet can only be used one time. If needed you can print more codes from your account.
- Backup Phone Number - Google can send a text message or a voice call to a backup phone number you select.
Creating Application Specific Passwords
If you access your Google account from an Android phone, Google Voice app, Microsoft Outlook, or any chat clients then you will need to setup application specific passwords for each program or device.
You only need to go through this process once assuming that you save the passwords in the phone or program.
To create the passwords go back to the 2-step settings page and click on 'manage application specific passwords'.
If you ever lose the device or need to turn off access for an application you can revoke access through the settings page.
Signing In With Verification Turned On
When 2-step verification is turned on you will still need to enter your Google username and password as you normally would. Google will then prompt you to enter a code.
Generating a Code Using the Android App
Start the authenticator application on your phone and enter the code displayed. The code on your screen will change every 30 seconds, so if you don't enter it into your computer before it expires you'll have to try again.
Summary
Google's two step verification process won't make your account impenetrable but it will make it very difficult to compromise. Hackers are looking for easy targets and will not want to bother with your account once they see you are using the two factor authentication system.
Having to re-enter the verification code every 30 days and each time you access your account from a new device is a minor inconvience. Personally I'd much rather have to enter a few additional codes then have to try and restore access to my digital identify if my password was stolen.
Hackers are using all kinds of different methods including brute force and key loggers as they attempt to gain access to your accounts so make sure you are doing every thing you can to protect yourself.
Comments
@elucidator
It is kind of scary that Google has so much information about our lives, and so much control to! Hackers have a lot to gain by grabbing a single username / password.
Lets just hope Google doesn't decide to turn evil anytime soon. :)
Great hub. I also enjoyed your page about "How to Install Perl on Windows 7" but the comments were disabled. Security is something that we all need to start taking very seriously. I must have heard them say 1,000 times that you need to have different passwords for everything. It took my gmail getting hacked into before I listened. Protecting your Google account is now a basic necessity. I look forward to reading more of your hubs in the future. Thumbs up!
Interesting head's up--thanks.
elucidator 7 months ago
Thanks for the information. I will check it out. Part of me his hesitant to give Google more information. I guess it is the lesser of two evils. I am wondering if I ultimately have a choice since I must have my computer and Google is tied to most everything I do.