On: Even with 2FA, Google accounts can be hacked with ...

[philip1209]

This sounds like an argument for adding hardware multi-factor auth in google. It's not a panacea, but a good starting point that can't be easily spoofed or hijacked.

[mynameisvlad → philip1209]

They already have it: https://support.google.com/accounts/answer/6103523?hl=en

And it adds nothing, since it still has fallbacks to the existing systems.

[asuffield → mynameisvlad]

You should be able to remove less secure authentication mechanisms via accounts.google.com, after setting up a security key

[noisy_boy → asuffield]

You still need to keep atleast one backup method in case the security key is corrupted/broken/lost etc.

[asuffield → noisy_boy]

Print out a recovery code and keep it somewhere safe.

[pngai → noisy_boy]

You can have two or more security keys associated with your account on Google.

[mynameisvlad → asuffield]

Oh really? I thought that it forced you to go back to the app if you use a non-U2F browser.