Google Gets Serious About Two-Factor Authentication. Good!

“Turn on two-factor authentication” is solid advice, and WIRED has repeated it for years. Once Google assesses data on how easy it is for existing two-factor users to interact with these mobile prompts, the company will start automatically opting users into two-step verification. “It’s true that multifactor authentication has historically been considered tedious and challenging to set up, but for many users that is no longer the case.” Multifactor authentication adds one or more additional checks to a login process beyond just a username and password. Users also might not have the equipment or know-how to navigate multifactor authentication, thus excluding them from services they might otherwise want to use. “At the same time, we recognize that today’s two-step verification options aren’t suitable for every user, so we are actively working on technologies that provide a secure, equitable authentication experience and eliminate the reliance on passwords.” Google users will still be able to opt out of two-factor authentication if they change their mind.