haha yes!!
Whenever I log in to my Gmail, I need to enter a code that it sends to my cell phone.
It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.
(I realize two-factor authentication is not perfect, but hey it definitely helps.)
It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.
(I realize two-factor authentication is not perfect, but hey it definitely helps.)
I actually don't have a cellphone rofl. So that doesn't really work. It says that I can use it with a call but VOIP numbers don't work.
GetawhaleWhenever I log in to my Gmail, I need to enter a code that it sends to my cell phone.
It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.
(I realize two-factor authentication is not perfect, but hey it definitely helps.)
my only fear with two-factor is that my google account is tied to my android phone, so i'm worried hacking my gmail = hacking my phone
It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.
(I realize two-factor authentication is not perfect, but hey it definitely helps.)[/quote]
my only fear with two-factor is that my google account is tied to my android phone, so i'm worried hacking my gmail = hacking my phone
I use Google Authenticator on my phone for Gmail authentication, and with Steam Guard sending emails to that account it basically means access to my phone is needed for Steam account access from a new device.
There are desktop application implementations that support Google Authenticator if you don't use a phone. See links:
https://github.com/cdmackie/winauth
http://superuser.com/questions/462478/is-there-a-google-authenticator-desktop-client
You are of course still vulnerable to keyloggers with a PC-only approach (though Authenticator generates time-based codes from a QR code scanned at setup, so it's probably still effective), and any kind of remote control would still leave you vulnerable if you are auto-logged-in on your usual device (which is the default for Steam Guard and Gmail), but it's at least an extra obstacle that could deter anyone simply mass-compromising accounts.
Make sure you're not reusing your email or Steam passwords anywhere else; login credentials can be logged by malicious websites, or stored in plaintext/reversible encrypted form and stolen from incompetent ones. Your email is usually the key to recovering any other accounts, so have separate, unique passwords for your email and for any financial services you use, and limit re-use to accounts that don't unlock other accounts or screw you over personally (though ideally, don't reuse at all).
There are desktop application implementations that support Google Authenticator if you don't use a phone. See links:
https://github.com/cdmackie/winauth
http://superuser.com/questions/462478/is-there-a-google-authenticator-desktop-client
You are of course still vulnerable to keyloggers with a PC-only approach (though Authenticator generates time-based codes from a QR code scanned at setup, so it's probably still effective), and any kind of remote control would still leave you vulnerable if you are auto-logged-in on your usual device (which is the default for Steam Guard and Gmail), but it's at least an extra obstacle that could deter anyone simply mass-compromising accounts.
Make sure you're not reusing your email or Steam passwords anywhere else; login credentials can be logged by malicious websites, or stored in plaintext/reversible encrypted form and stolen from incompetent ones. Your email is usually the key to recovering any other accounts, so have separate, unique passwords for your email and for any financial services you use, and limit re-use to accounts that don't unlock other accounts or screw you over personally (though ideally, don't reuse at all).