Google rolling out a new two-
step authentication feature, Google Prompt,
targeting enterprise employees.
The new option consists of a pop-up that
displays a mobile user's name and profile image,
and that specifies it the location and device
involved in the attempted sign-in. The device
owner is asked whether to allow or deny the
sign-in.
Enterprise end users still have other choices for
two-step authentication. They can use a Google
Security Key or enter a verification code sent to
their phone.
Google Prompt
"Implemented correctly, two-step authentication
is an improvement over traditional password-
based authentication,".
"Moving to the Google Prompt mechanism is a
step to make two-step authentication easier to
implement for end users,"
"Instead of having to copy a
six-digit code from one device or app to another,
they can hit a single button when prompted."
Google will update its Help Center with detailed
instructions on how to implement its latest two-
step authentication feature.
Google Prompt is available for both Android and
iOS. Android users have to update Google Play
Services to use Google Prompt, while iOS users
have to install Google Search on their devices
first.
However, Google Prompt does give users a
choice and should be easier to use, which could
result in fewer complaints.
It's not without risk, though.
"I'm not sure this is inherently more secure than
Google Security Keys, given devices can be hacked".
No comments:
Post a Comment