Google Authenticator for iOS returns, lost entries are back but may cause dupes

Google Authenticator for iOS returns, lost entries are back but may cause dupes

Just a few days ago Google released a 2.0 version of its Authenticator app for iOS, but a bug made user’s entries not show up and the company yanked it. Now v2.0.1 is back in the App Store, and it contains a fix for any two factor authentication users that downloaded the busted version. Based on the release notes, your old keys weren’t cleared by the update, but they just weren’t displaying. We tried it out on our iOS device that was blank after 2.0 and it worked as advertised, all accounts show up again. Although it’s safe to upgrade there is one more issue: anyone who created replacement accounts already will have duplicates. To avoid that, your best bet is to rename any new entries before updating — staying secure is fun and easy, isn’t it?

Filed under: , , ,

Comments

Source: iTunes

Google Authenticator for iOS updated, requires a fresh setup afterwards

Google Authenticator for iOS hits v20, but you'll need to set it up again after updating

Two factor authentication is becoming an increasingly common part of keeping one’s accounts secure online, and Google has just updated its Authenticator app for iOS. Outwardly, version 2.0 brings a new look that matches the style recently seen in other Google apps like Google+, YouTube and Gmail. The app is also retina display and iPhone 5 ready now, however there’s still no native support for the iPad. It still functions the same way, cranking out a login code for users to access their accounts on demand, however there’s one quirk you’ll want to be aware of before pressing the update button. As Steve Streza points out on Twitter (and we experienced ourselves), the new version clears your account details and will need to be paired again before it works. It shouldn’t be too much of a hassle (you did tie your account to a good backup phone number, right?) to get things set up again, but since it’s not mentioned in the changelog consider this a friendly heads-up.

Update: Just so we’re all caught up, Google is aware of the issue and working on a fix. Just as important, it’s pulled the update from the App Store while it works out the kinks to ensure no one else loses their precious Authenticator tokens… even if just temporarily.

Filed under: , , , ,

Comments

Source: iTunes, Steve Streza (Twitter)

This week on gdgt: the new Nexus 7, the Leap, and two-step authentication

Each week, our friends at gdgt go through the latest gadgets and score them to help you decide which ones to buy. Here are some of their most recent picks. Want more? Visit gdgt anytime to catch up on the latest, and subscribe to gdgt’s newsletter to get a weekly roundup in your inbox.

This week on gdgt: Nokia Lumia 1020, Olympus PEN E-P5 and Google's Chromecast

Comments

LinkedIn adds two-factor authentication through SMS

LinkedIn adds twofactor authentication through SMS

Who knew that tighter security was all the rage these days? Following Dropbox, Google and virtually everyone else, LinkedIn has joined the trendy (if smart) ranks of those offering two-factor authentication as an option. Switch it on and you’ll have to enter a verification code delivered by SMS before you can log in with a device that LinkedIn doesn’t recognize. That’s all there is to the process, really, but it may be enough to prevent ne’er-do-wells from messing with your CV.

Filed under:

Comments

Via: The Next Web

Source: LinkedIn

Evernote two-step verification now available for Premium and Business users

Evernote implements twofactor authentication, starts with Premium users

Three months after a major database hack, Evernote has finally made good on its promise to implement two-factor authentication as an additional precautionary measure. Following the footsteps of other security-conscious companies, the technique requires not just your username and password, but also a six-digit code provided either via text message or an app like Google Authenticator. Further, you can print out a list of backup codes in case you don’t have your phone handy. Premium and Business users will be the first to get this functionality — it’ll be offered to all users once the system proves to be robust enough.

Other apps in the Evernote clan, including Skitch, Penultimate and Evernote Food will need to be updated and certain third-party apps might need to be given their own dedicated passwords as well. Aside from the double-step verification, Evernote has also introduced the ability to view your account’s access history and a list of authorized applications; you can revoke any device from your account settings if necessary. All of these added layers of security are totally optional, of course, but you might want to set yourself a reminder to check them out.

Filed under:

Comments

Source: Evernote

Two-step verification starts rolling out for Microsoft accounts

Two-step verification starts rolling out for Microsoft accounts

Everyone else is doing it, so why not Microsoft, right? The company has been accused of playing the “me too” game in the past, but we’re not going to complain when the the end result is better security. As we learned from a leak last week, Redmond will begin enabling two-step verification for Microsoft accounts. The switch will get flipped for everyone over the next few days and, with email, Xbox Live and Skype (just to name a few) associated with the service formerly known as Live, it’s never been more important to keep it locked down. (Especially when others are learning this lesson the hard way.) The two-factor gateway is purely opt-in, except where it’s already been required: editing credit card information and accessing SkyDrive from a new computer. There’s even a dedicated authenticator app for Windows Phone 8, which works whether or not you’ve got an internet connection. There’s loads more detail at the source and you can check to see if the feature has been turned on for your account at the more coverage link. And if you can, we strongly suggest you turn it on. Like, now.

Filed under: , ,

Comments

Source: Official Microsoft Blog

Evernote plans two-factor authentication following last week’s hack

Evernote plans twofactor authentication following last week's hack and password reset

In a move that’s often more reactive than proactive these days, Evernote has shared plans to add two-factor authentication to its login process. This latest announcement follows last week’s hacking attack and subsequent site-wide password reset, and will be available to all of the site’s 50 million users beginning later this year, according to an InformationWeek report. It’s too early to say exactly how the Evernote team plans to implement the new security feature, whether through a dedicated app or text message password, but given the service’s scale, we can likely count out a hardware fob option, at least. For now, your best course of action is to create a secure password, or, if you’re especially paranoid, you may consider delaying your return until the security boost is in place.

Filed under:

Comments

Source: InformationWeek

Google experiments with hardware-based authentication, envisions passwordless future

Google experiments with hardwarebased authentication, envisions passwordless future

2012 was not a great year for security. From the “epic hack” of Wired’s Mat Honan to the breach of Dropbox and the breakdown of barriers at Blizzard (not to mention countless smaller incidents), last year held frequent reminders that what you put online is never truly safe. Google has, in the wake of such public failings, began pushing its two-factor authentication with a pretty heavy hand. But even that system has its short comings, and Mountain View is looking for ways to shore up users’ accounts. In particular the web giant is exploring hardware authentication options and experimenting with a device called YubiKey — a USB-based token system. The research will be unveiled in a paper being published later this month in IEEE Security & Privacy Magazine, and includes preliminary work on a protocol for using a hardware device to unlock an online account. If carrying around and jacking in a USB key sounds too cumbersome, fear not. Google is also working on a wireless version of the platform that could be embedded in a cellphone or even a piece of jewelry like a ring. We may never ditch the password entirely, but we can hope.

Filed under: ,

Comments

Source: Wired, IEEE Security & Privacy Magazine