Google Apps admins gain two-step security powers

Summary:Google Apps got a security bump on Tuesday, with Google making it possible for administrators to force the use of two-factor authentication.The feature, which Google calls '2-step verification' in its implementation, adds a phone-derived code to the credentials a user needs to log into their Google account.

Google Apps got a security bump on Tuesday, with Google making it possible for administrators to force the use of two-factor authentication.

The feature, which Google calls '2-step verification' in its implementation, adds a phone-derived code to the credentials a user needs to log into their Google account. It was introduced in 2010 for Apps users and subsequently extended to the general public, but until now it has remained optional for all users.

That changed on Tuesday, according to a blog post by Google Apps product manager Rishi Dhand.

"Starting today, domain administrators can require the users in their domain to use 2-step verification," Dhand wrote. "This new feature will help Google Apps customers accelerate their deployment of 2-step verification."

Dhand pointed out that two-factor authentication "greatly reduced the chance of unauthorised access via account hijacking or other means".

"Even if someone has stolen your password, they'll need more than that to access your account," he explained.

Dhand also announced new capabilities for Apps customers that use Microsoft Active Directory (AD). "Businesses can manage password policies (e.g. password strength, reset intervals, etc.) using AD and then synchronise from AD to Google Apps when passwords are changed. Passwords are transmitted hashed and encrypted during synchronisation," he wrote.

Topics: Telcos

About

David Meyer is a freelance technology journalist. He fell into journalism when he realised his musical career wouldn't be paying many bills. His early journalistic career was spent in general news, working behind the scenes for BBC radio and on-air as a newsreader for independent stations. David's main focus is on communications, of both... Full Bio

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.