2-Step Verification

Background

With 2-Step Verification, or two-factor authentication, you add an extra layer of security to your account in the event your password is stolen. 

NOTE: You are required to set up 2-Step Verification on your account

After you set up 2-Step Verification, you can sign in to your account with:

• Your password and a second step

• Your passkey

Choose a method

To begin the process to enable 2-Step Verification, go to https://myaccount.google.com/signinoptions/twosv

Choose a 2-Step Verification method.

Caribou Security recommends using an Authenticator app, Passkey, Google prompt, or Security key.

Authenticator app

You will need an Authenticator app on your mobile device.  If you already have one installed, you can use that.  Otherwise, you will need to install one.  Caribou suggests using the Google Authenticator (Android, iOS)

Once your Authenticator app is ready, go to https://myaccount.google.com/two-step-verification/authenticator 

Passkey

Passkeys are a simple and secure alternative to passwords. With a passkey, you can sign in to your Google Account with your fingerprint, face scan, or device screen lock, like a PIN. You can create a passkey on a phone, computer, or hardware security key. 

Once you have signed in to Chrome (using your Caribou account), follow these instructions: https://myaccount.google.com/signinoptions/passkeys

Google Prompt

If you choose not to sign in with a passkey, we recommend you use Google prompts as your second step. It's easier to tap a prompt than enter a verification code. Prompts can also help protect against SIM swap and other phone number-based hacks.

You’ll receive Google prompts as push notifications on:

• Android phones that are signed in to your Google Account.

• iPhones with the Gmail app , the Google Photos app , the YouTube app , or the Google app  signed in to your Google Account.

Based on the device and location info in the notification, you can:

• Allow the sign-in if you requested it by tapping Yes.

• Block the sign-in if you didn’t request it by tapping No.

For added security, Google may ask you for your PIN or other confirmation.

Security Key

A hardware security key is a small device that you can buy to help verify it’s you when you sign in. When we need to make sure it’s you, you can simply connect the key to your phone, tablet, or computer.

Examples of a Security Keys are Google Titan, Yubikey, or Nitrokey