Don't use third party auth to sign in
gurjeet.singh.im
Don't use third party auth to sign in
1–10 of 544 posts
Re: Don't use third party auth to sign in
#2I realized that recently after Gmail locked my account for using email outreach software.
I restored it but automatically had to start thinking about a backup plan where I’d have to point my MX records away from Gmail to something else immediately in order to prevent email downtime.
Re: Don't use third party auth to sign in
#3I only ever use "sign in with" for throaway stuff I don't care enough about to register an account - if it's in any way important I setup an account, and add whatever form of 2FA I can.
Re: Don't use third party auth to sign in
#4[deleted]
Re: Don't use third party auth to sign in
#5To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world.
Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email account, so make sure these are companies your trust and your access to these accounts is as secure as possible (ie strong unique passwords and app-based, not SMS-based two-factor authentication)
Re: Don't use third party auth to sign in
#6Has anyone else noticed random popups on 3rd party websites asking for google sign in?
I even used firefox when it happened:
https://imgur.com/a/JC52lBV (lequipe.fr)
https://imgur.com/a/VSM3Uk9 (reddit.com)
https://imgur.com/a/KpVCYBL (medium.com)
Re: Don't use third party auth to sign in
#7To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world. Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email acc…
Yeah but they’ve still got your emails.
Re: Don't use third party auth to sign in
#8To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world. Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email acc…
$6/month doesn't sound like much... Till you realise you'll probably have this setup for 20 years, and suddenly it's $1200. That's a lot to protect against a thing that will probably not happen (account being banned)
Re: Don't use third party auth to sign in
#9To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world. Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email acc…
Yeah but they’ve still got your emails.
For that you have this:
You can export all your email in a single .mbox file.
This might not work if your account is suspended, but if you set up email forwarding to an alternative address (e.g. to protonmail) that might still stay active so you can transition your addresses.
Re: Don't use third party auth to sign in
#10To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world. Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email acc…
Yeah but they’ve still got your emails.
Use a third-party client that grabs the emails locally.