Feeds

Google Apps tap mobiles for beefier log-in security

Cell phone as security token

Internet Security Threat Report 2014

Google is tapping user cell phones to provide an extra level of sign-in security for Google Apps, its suite of online business applications.

On Monday, the company announced that it's now offering what it calls two-step verification. When the new tool is turned on and you log in to your Google Apps account, it requires not only a password but a separate verification code pulled from your mobile phone. "This makes it much more likely that you’re the only one accessing your data," the company said in a blog post. "Even if someone has stolen your password, they'll need more than that to access your account."

The verification code is sent to your mobile phone via SMS, voice call, or an application that's available for Android handsets, BlackBerries, and iPhones. The service is available today for free on the Premier, Education, and Government editions of Google Apps, and users of the free Standard edition will have access "in the months ahead."

Administrators must activate the tool from the Admin Control Panel, and individual users can then set it up via the Accounts tab on their Gmail settings page. If you like, you can turn the service off for certain "trusted computers" (i.e. your work desktop) but leave it on whenever your account is accessed from other machines. "You can...indicate when you're using a computer you trust and don't want to be asked for a verification code from that machine in the future," the company said.

Google also plans to roll the service out across individual Google accounts (i.e. regular accounts for non-Google Apps users) in the coming months.

In an effort to encourage other outfits to adopt similar services, Google has based its two verification on the Initiative for Open Authentication (OATH) standard (not to be confused with OAuth), and it has open sourced its verification code mobile application – Google Authenticator – so that others can customize it as they see fit. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Netscape Navigator - the browser that started it all - turns 20
It was 20 years ago today, Marc Andreeesen taught the band to play
Sway: Microsoft's new Office app doesn't have an Undo function
Content aggregation, meet the workplace ... oh
Do Moan! MONSTER 6-day EMAIL OUTAGE hits Domain Monster
Customers freaked out by frightful service
Sign off my IT project or I’ll PHONE your MUM
Honestly, it’s a piece of piss
Return of the Jedi – Apache reclaims web server crown
.london, .hamburg and .公司 - that's .com in Chinese - storm the web server charts
NetWare sales revive in China thanks to that man Snowden
If it ain't Microsoft, it's in fashion behind the Great Firewall
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.