If your email is hacked, everything is

#1

Post by rmnoon » Tue, Aug 11, 2020, 5:56 PM UTC

If your email is hacked, everything is
medium.com

Re: If your email is hacked, everything is

#2

Post by kozak » Tue, Aug 11, 2020, 6:13 PM UTC

Few weeks ago I got a notification that someone from Moscow (which is like the opposite of where I reside) wants to restore my Google account ("is it you?"). It had "yes" and "no" buttons. I was in the middle of doing something and opened the notification pretty carelessly. Thankfully, I have managed to "no" successfully. But it was horrifying to think that I could have lost everything if I accidentally touched that "yes" button on my phone's screen.

Re: If your email is hacked, everything is

#3

Post by verdverm » Tue, Aug 11, 2020, 6:41 PM UTC

kozak wrote: post #2

Few weeks ago I got a notification that someone from Moscow (which is like the opposite of where I reside) wants to restore my Google account ("is it you?"). It had "yes" and "no" buttons. I was in the middle of doing something and opened the notification pretty carelessly. Thankfully, I have managed to "no" successfully. But it was horrifying to think that I could have lost everything if I accidentally touched that…

Get a physical key and remove other 2FA methods for your email. That would stop them even if you did click yes.

Re: If your email is hacked, everything is

#4

Post by kozak » Tue, Aug 11, 2020, 8:14 PM UTC

verdverm wrote: post #3

kozak wrote: post #2

Few weeks ago I got a notification that someone from Moscow (which is like the opposite of where I reside) wants to restore my Google account ("is it you?"). It had "yes" and "no" buttons. I was in the middle of doing something and opened the notification pretty carelessly. Thankfully, I have managed to "no" successfully. But it was horrifying to think that I could have lost everything if I accidentally touched that…

Get a physical key and remove other 2FA methods for your email. That would stop them even if you did click yes.

What will happen if I lose the physical key (or someone pretends that they are me who lost the physical key)?

Re: If your email is hacked, everything is

#5

Post by verdverm » Tue, Aug 11, 2020, 8:37 PM UTC

kozak wrote: post #4

verdverm wrote: post #3

Earlier quoted context omitted.

Get a physical key and remove other 2FA methods for your email. That would stop them even if you did click yes.

What will happen if I lose the physical key (or someone pretends that they are me who lost the physical key)?

If you lose the key, keep backup codes somewhere safe.

Most likely if you lose the key, no one will know what it is for or who's it is.

You can also register multiple keys (in GSuite, GitHub, etc.)

Re: If your email is hacked, everything is

#6

Post by tsjq » Wed, Aug 12, 2020, 5:15 AM UTC

verdverm wrote: post #3

kozak wrote: post #2

Few weeks ago I got a notification that someone from Moscow (which is like the opposite of where I reside) wants to restore my Google account ("is it you?"). It had "yes" and "no" buttons. I was in the middle of doing something and opened the notification pretty carelessly. Thankfully, I have managed to "no" successfully. But it was horrifying to think that I could have lost everything if I accidentally touched that…

Get a physical key and remove other 2FA methods for your email. That would stop them even if you did click yes.

pls pardon my ignorance. does GMail have this physical key feature ?