Live data from Hacker News

Adding a phone number to your Google account can make it less secure

tech.vijayp.ca

1–10 of 299 posts

Re: Adding a phone number to your Google account can make it less secure

#3

Adding a phone number that people KNOW about can make it LESS secure. A workaround is to get a phone number that is only used for identity verification and not given out to anyone.

That sounds like a good fix, but a tall order for most people.

Re: Adding a phone number to your Google account can make it less secure

#4
I don't think it's possible to make a Google account without a phone number anymore. It's really unfortunate, especially because I deliberately don't set up fallback contacts for my "alternate" gmail accounts, and Google keeps locking them as suspicious when I log in from a second location, and I need to "verify" with a phone number any time that happens (at which point I abandon the account).

I understand that they want to fight spam, but I'd be willing to spend 5 minutes doing captcha type activities in exchange for not requiring a phone number, and that should pretty severely rate limit account creation.

Re: Adding a phone number to your Google account can make it less secure

#6
What I recall reading over the last year is that:

- phonelines can be hijacked (this article)

- DNS can be hijacked in a similar manner

- SMS can be hijacked (for 2FA via text message)

I guess 2FA using an authenticator app is the way to go for now. Do you guys agree with the removal of backup phone numbers recommended here? Seems reasonable to me but scary; I've lost my phone(s :( ) before. I do have backup codes generated though.

Re: Adding a phone number to your Google account can make it less secure

#8

Adding a phone number that people KNOW about can make it LESS secure. A workaround is to get a phone number that is only used for identity verification and not given out to anyone.

One way to accomplish this would be with, ironically, a Google Voice-type service (but associated with a completely independent email provider)

Re: Adding a phone number to your Google account can make it less secure

#10

Can Americans explain me how can you just do things like that by calling customer support? Wouldn't it make more sense to go and show your ID if you want to make changes like that?

In your call with customer support, questions are asked to verify your identity.

They aren't as accurate as physically showing your ID, however. Not that I'd want my ID digitized though.

Post reply on HN