HN Explorer

Tell HN: Gmail enabled 2FA with the YouTube app

2 points by peterburkimsher ↗ HN
Yesterday I urgently needed to print something, so I tried signing in to GMail on a library PC.

GMail requested that I verify my identity using a code sent to the YouTube app on my mum's phone.

Thankfully this time I was able to provide the information they needed, but I'm shocked that Google enabled 2FA without my consent.

There doesn't seem to be a way to disable this. Now I'm afraid of logging in to Google services on any computer or phone, in case the account decides to use those devices to verify my identity in future.

6 comments

[ 0.28 ms ] story [ 18.0 ms ] thread
cranberryturkey
I hate 2FA.
t1c
Have fun getting your accounts compromised, then. I have no clue why anyone would actively hate security measures.
cranberryturkey
i've lost access to my account more times because of 2FA and zero times without it.
t1c
I'm genuinely curious how, do you not store your 2FA keys somewhere safe?
ok_dad
I was able to log into my account that I was locked out of because of this. Trying to add a FIDO token to my account has become impossible, as Google simply doesn’t recognize it for future logins. Now I’ve been forced to use a passkey, the only 2FA that works for me now, to secure my account because Google had broken my FIDO tokens that were working for years and years. The only way I could login to remove those was via a YouTube verification.

I’m so sick of Google, I only keep this account because it was formerly my main email, so I don’t want anyone stealing my username later.