Hacker News new | past | comments | ask | show | jobs | submit login

And entering my password in a different kind of text box is more secure how?



Because you are entering it into a Google login flow.

Which usually will have MFA and sometimes not a text box at all (passkey).


2FA support. Gmail requires 2FA.


It doesn't "require" it. Users might enable it or disable it.

If it's disabled, can you explain to me how is it safer?


Gmail can require 2FA more or less at google's whim, regardless of user preferences (and if you don't have a method set up, you'll be locked out of logging in, at least through that particular device/connection)


It can require it if it is enabled. Which is not mandatory.


No, even if you have it disabled, google will occasionally ask for a second factor anyway. This often outright locks people out of their accounts.

(see this for example: https://support.google.com/mail/thread/14768952/how-to-turn-...)


If Google detects something strange or is just feeling particularly chaotic that day, they will lock the account and require you to verify it using the phone number. Even if you don't have 2FA enabled.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: