Google is changing the way it handles 2FA

System Hardening Android
(Image credit: Google)

Google is making it easier for users to sign into their accounts using backup codes after losing their smartphone with a new dedicated backup codes page.

When users set up two-factor authentication (2FA) or two-step verification (2SV) as the search giant refers to it, the company issues 10 backup codes that can be used to gain access to your account should you happen to lose your smartphone or your security key. Since you no longer have a second device to verify that it really is you, you'll need to enter these backup codes along with your Google credentials.

In an update to the Google Workspace blog, the company announced that it has created a dedicated backup code page instead of a pop-up. However, you'll still access it from Google's 2-Step Verification list on Android, iOS and the web.

This new backup code page can be used to generate new backup codes or refreshed for additional backup codes that users will need to print or download as the did before. However, Google has also added a new option that allows you to delete your backup codes.

OAuth incremental authorization

In a separate post on the Google Developers blog, the company revealed that it's changing the OAuth consent experience to simplify how users share data with third-party apps. This new experience also improves the consent conversion for apps that utilize incremental authorization.

After consolidating multiple-permission requests into a single screen back in July, Google is now removing the check box when an app only wants to access one of the company's services. 

For instance, if an app wants access to both Google Drive and Google Calendar, a user would need to click on check boxes for each service. Now when an app only needs to access one of the company's services such as your cloud storage users can simply click continue which should help speed up the process of giving third-party apps access to your Google account.

Via 9To5Google

TOPICS
Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Read more
Isometric demonstrating multi-factor authentication using a mobile device.
Google is ditching SMS - and will now use QR codes for Gmail account authentication
Person using a tablet in an office
Best authenticator app of 2025
Google Pixel 9 Pro
Google Password Manager may be set to introduce a nuclear option for its Android app
Shadowed hands on a digital background reaching for a login prompt.
A flaw in Google OAuth system is exposing millions of users via abandoned accounts
Fraude en ligne phishing
Google forced to step up phishing defenses following ‘most sophisticated attack’ it has ever seen
1Password partnership with Oracle Red Bull Racing F1 team
1Password is making it easier to find passwords based on where you are
Latest in Security
Abstract image of cyber security in action.
MassJacker malware targets those looking for pirated software
Code Skull
US government warns Medusa ransomware has hit hundreds of critical infrastructure targets
An American flag flying outside the US Capitol building against a blue sky
The FCC is creating a security council to bolster US defenses against cyberattacks
Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.
Microsoft warns about a new phishing campaign impersonating Booking.com
Ransomware
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Meta warns of worrying security flaw hitting open source type software
Latest in News
Jason Sudeikis' Ted Lasso pointing at someone in Ted Lasso season 2
Believe it, baby: Ted Lasso season 4 is officially in development for Apple TV+ – and Jason Sudeikis will reprise his role as the titular soccer coach
Rainbow Six Siege X promotional art.
The Tom Clancy's Rainbow Six Siege X 6v6 mode might finally pull me away from Black Ops 6
A close up of the new web version of Apple Music Classical
Apple Music Classical is now available on the web, but its Mac app is still nowhere in sight
Silent Hill f
Silent Hill f will present players with 'a beautiful yet terrifying choice', and I can't wait to see what it is
Google Chromecast 2
Google is finally rolling out a fix for broken Chromecasts – just as new bugs appear on the Chromecast with Google TV
Garmin Instinct 3 in Neotropic Green
"I'm an idiot": Garmin user reveals how fixing one setting completely changed their training after months of making no progress