Gmail two-step verification: Less than 10% of Google users have its most important security feature enabled

Sign up to our free weekly IndyTech newsletter delivered straight to your inbox Sign up to our free IndyTech newsletter Sign up to our free IndyTech newsletter SIGN UP I would like to be emailed about offers, events and updates from The Independent. As Google puts it: “You sign in with something you know and something you have.” You can turn it on by clicking this link and following Google’s step-by-step instructions. Each code can only be used once.” Asked why 2FA isn’t mandatory on all accounts, Google software engineer Grzegorz Milka said the company fears the feature could turn users off. “It’s about how many people would we drive out if we force them to use additional security.” Google lets you choose not to use two-step verification on a particular computer. In the space of 12 months, it found 788,000 login credentials stolen via keyloggers, 12 million stolen via phishing, and 3.3 billion exposed by third-party data breaches.