
You're most likely already familiar with two-factor authentication. You access your bank's ATM with your ATM card and four-digit PIN. That's two-factor authentication: "something you know" (the PIN) combined with "something you have" (the ATM card). Google's two-step authentication is similar. Once enabled, you'll enter your username and password (something you know). That's one factor. Then, you'll access the Google Authenticator app to generate a 6-digit one-time password on your mobile phone (something you have). Once you enter this 6-digit code to gain access to the account. That's two factor, or two-step, authentication.
The 2-step verification protects your account from hijacking by adding another layer of security. With this kind of two-factor authentication, mere knowledge of username and password is not sufficient to break into a user's account. The attacker also needs knowledge of the shared secret key or physical access to the device running the Authenticator app.
Before you begin
Included in this chapter: |