Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm using 2-factor authentication. Couldn't create an application password. Had to use my main pwd+token which is only good for 30 days. Shouldn't they allow the use of a 2-factor application password for an iOS app?


No, they shouldn't allow the use of an application password. Application password are a hack to get around the fact there are so many apps that rely on Google that don't support 2 factor authentication. This does add some benefits like one permanent password and the ability to revoke it, but that is at the expense of security. Eventually normal password + token is how all apps using a Google account should function at login, so of course a new Google made app will function this way.


Why couldn't you create an application password?


I created an application password to use for the iPhone app. After I tried to authenticate it told me that I couldn't use application passwords and to use my normal password+token.


Worse yet, on my iPhone 3G I can't get the code from the Authenticator app and then log on to the Google+ app before it expires... it's just too slow :/


What are the advantages of using this app? It seems like a lot of overhead for recieving information that can be sent in a text message.


No text message costs, I'd think. And I've had text messages take several minutes to arrive, websites rarely run that slowly.

For myself: I've got an iPod. No text messages there (I have Voice, but not everyone does).


If you have an iPhone, isn't it required to subscribe to an unlimited SMS plan?


No: http://store.apple.com/us/product/MC603LL/A?mco=MjI4NTM2NTM

And, previously, not after the contract runs out.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: