38 6 days ago

yeah gross. I just finished moving everything off Gmail because they are forcing MFA

1
pachouli-please 6 days ago

you moved off gmail due to forced mfa of all things? interesting...

also, aren't 'app passwords' or whatever they call it still a thing?

sebmellen 6 days ago

They won’t allow you to use regular TOTP alone. You always have to link a phone, even for Google Workspace. It sucks!

artooro 6 days ago

This is not true. In some organizations I work with they only allow Security Keys on Google Workspace, you can't even use TOTP. It's possible to disable SMS and Phone verification, but if you allow TOTP then Google Prompt is also automatically allowed.

fauigerzigerk 6 days ago

Neither my Google Workspace account nor my personal Gmail account has a phone number.

38 6 days ago

yes I don't like security decisions forced upon me, that's reasonable. if I want a throwaway email, I don't need MFA because I don't care if the account is compromised. but I don't get to make that decision because Google decided for me that my account will have forced MFA

fauigerzigerk 6 days ago

>if I want a throwaway email, I don't need MFA because I don't care if the account is compromised.

But Google cares if their servers are used to send spam or worse, because it makes their email service less useful for other users who may not use it as a throwaway account.

shpingbing 6 days ago

I imagine it's because they would be (legally) responsible for any malicious usage of your account.

stonogo 6 days ago

Based on what? Have the laws changed, or has there been a recent ruling on something related to this?

38 6 days ago

"I imagine" which means they have no idea what they are talking about