Android users no longer have to tax their brains when using two-factor authorization

Android users no longer have to tax their brains when using two-factor authorization
Don't you hate receiving a text with a verification code for two-factor authorization that is just so long that you can't remember it? Something like 457843299XD853 doesn't exactly stay in your brain. And if you're not able to grab a pen and write the code down, you might have to rely on your memory. Now there are some apps that will autofill the code automatically, but there are many that don't. It's those latter apps that Google is addressing, according to XDA, with a new feature that will automatically fill in verification codes using Google's Autofill system.

First, let's backtrack for a second. Two-factor authorization requires you to have your phone nearby when securely logging into an app. When submitting your information, you will receive a text message with the aforementioned verification code. Enter the code into the app and open sesame. Google says that 2FA (the fancy shortcut name for two-factor authorization) blocks 100% of automated bots and 96% of bulk phishing attacks. Overall, it helps prevent 76% of targeted attacks from succeeding. In other words, 2FA is something that everyone should use.

There are things that app developers can do to take the verification code from text message to their apps, but it requires a certain text message format be sent to the user which might be a bit confusing. So if you want the protection afforded by 2FA but don't want to tax your brain, you can set up SMS verification autofill by following these directions. First, your phone must be running Google Play Services version 19.2.75. Go to Settings > Google > Verification autofill. Toggle that feature to "on." But, and it's a big but, you must first have your handset enabled for regular Autofill. To do that, go to Settings > System > Languages > Advanced > Auto-fill service.

FEATURED VIDEO

7 Comments

1. Vokilam

Posts: 1278; Member since: Mar 15, 2018

I understand how it works and I think it’s a great idea. iOS verification codes are much simpler 6 digit number, like 678 123, for example and easier to memorize, but I have the phone with me to type it in anyway.

3. Vokilam

Posts: 1278; Member since: Mar 15, 2018

Honestly, I rather have this as an opt-out option. I hate that Apple implemented this. I know it’s necessary for some, but I don’t care - there’s nothing important on my phone.

2. speedingcheetah

Posts: 86; Member since: Jul 22, 2017

SMS 2FA is not worth anything. It is not at all secure. App based 2FA is what you should use....like Authy.

4. PairedPrototype

Posts: 1; Member since: Sep 18, 2019

Doesn't auto filling codes defeat the whole purpose of 2FA? 2FA works by requiring something you know and something you have. If the code is auto filled, an attacker only needs your password, so they don't require the "something you have" part. I'm thinking there's more to the story here

5. lyndon420

Posts: 6824; Member since: Jul 11, 2012

Agreed... there's always more to every story. I'm not sold on 2FA because it means I need to surrender more of my personal information - my phone number.

10. blastertoad

Posts: 46; Member since: Jul 17, 2018

What is the chances of the person or group attempting to gain access to an account and having your personal device.

9. jcg73978

Posts: 1; Member since: Sep 19, 2019

Have you heard of copy and paste? It's all the rage now a days! Dumbasses!

Latest Stories

This copy is for your personal, non-commercial use only. You can order presentation-ready copies for distribution to your colleagues, clients or customers at https://www.parsintl.com/phonearena or use the Reprints & Permissions tool that appears at the bottom of each web page. Visit https://www.parsintl.com/ for samples and additional information.