Google Gmail users two-step verification of the use of tutorial

Because Google's Gmail accounts are often malicious attacks, so the author suggested that all users with Gmail to open two-step verification, so that security can be guaranteed, two-step verification of the proposed use of the smartphone installed in the app (Google Verifier) to generate the verification code, do not receive the verification code by SMS, Because SMS can also be intercepted by operators, security is still not guaranteed. Below, the author introduces the two-step verification of the specific use of the tutorial for the vast number of Gmail users reference.

　　Two-step authentication and dynamic passwords

Two-step verification, refers to the user login to Google account, in addition to the user name and password to enter, but also require users to enter a dynamic password for their mobile phone, for Google account added a layer of protection. That is, even if an intruder steals a user's Google password, it will not be able to log in to the account because it cannot use the user's phone.

Gmail's two-step verification supports the iphone and the Android phone, which is actually a type of dynamic cipher. Dynamic Password is also called a one-time password, which means that the user's password is constantly changing according to time or usage, and each password is used only once. Because each password used must be generated by a dynamic token and the user's password is different each time, it is difficult for a hacker to calculate the next dynamic password that appears. But dynamic passwords require a high demand for mobile phones, and smartphones like the iphone or Android are needed.

　　Install two-step verification

For Gmail users who are often attacked, it is highly recommended that Gmail's "Two-Step Authentication" feature be set up by logging into Google's account and then accessing the address, which allows the user to choose how to obtain the Authentication code: SMS, voice phone, or smartphone application. If the user's phone is an iphone, Android or BlackBerry, it is highly recommended to choose a smartphone application that is more stable and fast.

Then go to itunes or the Android Market and download a app called Google Authenticator to install it and adjust the phone's time to the right time before running.

Then in Google Authenticator (Google authenticator), click on "+". Select a key based on the time type. In account, type the full e-mail address of the user. In the key, type the key generated on Google Web page, the space is optional, click "Finish".

You can then use the dynamic password, which greatly enhances the security of Gmail.

　　Use two-step validation

After the two-step authentication is enabled, the user's specific use process is, on the web side, the user logs into the Google account and enters the original username and password first.

The user is then prompted to enter the dynamic CAPTCHA code on the phone. The user only needs to open the mobile phone the Google Authenticator application, will display the dynamic authentication code to enter in the screen, the point "confirms" can log on normally.

In order to reduce the number of input, users can choose to enter the dynamic authentication code every 30 days.

For stand-alone applications on the phone or on the desktop, for example, Gmail Mobile version, desktop Picasa, etc., can not use dynamic passwords, need to be in the "two-step verification" settings to generate a random password for the application, users in these stand-alone applications, login Google needs to use the "Two-Step authentication" generated by the random password.

　　Turn off two-step validation

After the user has enabled "two-step authentication", if it feels too cumbersome to use, you can choose to turn off two-step verification and close the method:

Access the two-step authentication page under Google account settings. Log in using user name, password, and Authenticode, and click Close Two steps to verify. A pop-up window is displayed to determine that the user wants to turn off the two-step authentication and click OK to turn off two-step verification.

Some users reload the phone's Google validator, will forget to pause the two-step verification, the result of their inability to login to Google, at this time how to close the two-step verification?

In this case, after using the static password login, in the authentication code input interface, click "Cannot use the telephone", may use: 1, the standby authentication code. The first time you use two-step authentication, you will need to print more than 10 alternate authentication codes, and log in with any one of the passwords in that print file. 2, mobile phone messages. Google will generate a random authentication code and send it to the user's phone via SMS, and log in with this captcha.

　　Summarize

Mailbox is the core of password management and key, through the message reset password function, you can get most of the user's Web site password, so once the mailbox password is black, will cause users all password system out of control, Gmail dynamic password Although it looks troublesome, in fact, not every time input, In a single computer can be entered 30 days again. Convenience is good, security is more important, users must pay attention to their password management, although added a little inconvenience, but you may avoid the possibility of a great loss.