Google accounts these days link up to a lot more than just your email. Calendars, contacts and Google drive to name just a few. For developers your Google account may also be the gateway to accessing information about your web site through services like analytics, not to mention your email which is often the key to gaining access to accounts with other companies, like domains or hosting. If keeping these accounts and data safe is something you take seriously, then Google's two step verification process might be just for you.
Google two step verification (also known as two factor) is a prevention measure against your password being stolen and used to access your account. The system works by asking for a second level of security in the form of a code that will be sent to your phone via text, voice call, or using a mobile app.
No, Google gives you the option to disable the two step authentication on specific devices, meaning you can save yourself the hassle when you're at home or on a known, secure device and network.
Don't worry - it's all been thought through! During the setup process you can setup backup telephone numbers (mobile or landline) as well as one-time use backup codes that you can print or store on a secure drive.
Now that you're setup, login (re-confirm) and create a backup telephone number incase your phone is lost or stolen. You can also print or store several backup codes for one-time use (make sure you store these somewhere secure!). These steps will ensure you don't get locked out of your account. You also might want to consider switching to the app rather than using text messages as this will work even if your phone has limited connectivitiy.
Now that you're setup with two-step verification you may notice some of your apps or services like webmail stop working on your devices (e.g. webmail on your tablet). To set these up there's an App-Specific password tab on the 2-step verification settings page that you can use to generate passwords for applications that aren't compatible with 2-step verification. These passwords are designed to be entered once into your application so you don't need to memorise them.
"Please contact your domain administrator to enable 2-step verification for site.co.uk through the Google Apps administrator control panel."
Because I'm using Google Business Apps my account technically has an administrator, even though this is also me. So to use certain features like two step authentication I first have to enable it. To do this follow these steps: