On Tue, Jul 28, 2015 at 10:10 PM, Kenneth Ayers <justkenn...@gmail.com> wrote:
> > > On Tue, Jul 28, 2015 at 9:17 PM, DEP/Dodo <depfah...@gmail.com> wrote: > >> Now that 2 step is officially enabled, I have a few residual questions, >> some of which were discussed previously. However, I can't bear to search >> through all the posts both here and on my earlier 2-step thread (sans the >> word "graduation). >> >> 1. I enabled 2-step via the computer I will be taking with me at >> times. I made sure to trust that computer. I understand that 2-step >> affects getting into my Chrome/Google account. What I don't understand is >> I remain signed in to My Account (the cookies?) so that I can turn on the >> computer and immediately go into Gmail. How is Gmail then protected by >> hackers and such? >> >> If you're taking a computer out of the house and that computer doesn't > require you to enter a password when logging into your Google account then > that's an issue. > *I have had no need to log into my Google account, yet have been able > to access Gmail, Chrome browser, Google to search, etc. * > If the computer is stolen, you have zero protection. Any computer you > take with you should be requiring a password to login. > *And mine does. Wait--are you still talking about a password for the > Google account or a password to get into your computer? * > > *The computer I'd be taking out of the house has been trusted. Therefore, > a password would be required for me or anyone to login to my Google > account.* *No verif. code would be required on that trusted computer. * > > *Both before and after enabling 2-step, I was required to provide my > password to sign into the account. I rarely had a need to do this. And, > then and now, I can turn on the computer and go right into Gmail w/o being > required to sign into my account. I * > *essentially * > *have repeated what I wrote above (#1 item). * > *Any and all repetition on my part is an effort to be clear. * > > *In repetitious summary: If the trusted computer is stolen, the thief > would have to know my password to get into my Google account. However, > he/she would have no problem going directly into Gmail as I apparently am > always signed in. In experimenting, I have signed out of the account, > tried to open Gmail, had to sign in, and then I remain signed into the > account. The next time I open Gmail, no problem. Please see next > paragraph.* > > Only have the "stay signed-in" option enabled for a computer that you feel > is secure, i.e, one that stays inside a locked house. > *I don't know how to enable "stay signed in." As I said, it's like a > default setting.* > But even then, if someone breaks into your house and steals that > computer and there's no password security on your account, then they'll > be able to get into it. So there's a trade-off. I don't require a > password on the computer > *[Again, did you just switch to a password on your computer rather than > a password to get into your Google account?]* > in my house because I think it's safe enough as I don't take it anywhere > and I don't want the bother of always having to login, but if I'm robbed > someday I'll probably regret that choice. > > > > As for your having selected to not require verification codes on this > computer that you take with you, I guess it's secure enough but ONLY if you > have the password protection still. If the computer is stolen and you > don't require verification codes, then at least the password will prevent > the thief from accessing the account. The only risk is if the thief > somehow also knows your password which would be very unlikely for just a > random thief. The 2 step verification is protection against someone who > DOES know your password. > > So please be sure to turn off that "stay signed-in" option on your notebook > *(how??!!) * > or get to the bottom of finding out how it is that you don't need a > password to login. > *I do need a password to login to my Google account. Have seldom > needed to get into my account until working with 2-step.* > > > -- > Regards, > > Kenneth > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Gmail-Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/gmail-users/oEGrrFA026k/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > gmail-users+unsubscr...@googlegroups.com. > To post to this group, send email to gmail-users@googlegroups.com. > Visit this group at http://groups.google.com/group/gmail-users. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Gmail-Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to gmail-users+unsubscr...@googlegroups.com. To post to this group, send email to gmail-users@googlegroups.com. Visit this group at http://groups.google.com/group/gmail-users. For more options, visit https://groups.google.com/d/optout.
