Re: [Fetchmail-users] Planned Google authentication changes

[Carlos E. R. <rob...@te...>]

On 2022-03-23 12:06, Carlos E. R. wrote:
> On 2022-03-22 09:22, Matthias Andree wrote:
>> One more thing on Google specifically,
>>
>> Apparently Google still offer App-specific passwords if users are ready
>> to upgrade their account to 2FA (2-factor authentication).
>>
>> https://support.google.com/accounts/answer/185833
>>
>> Does anyone using Google and have 2-factor authentication enabled for
>> their account
>> have experience with setting that up for fetchmail and can report here?
>
> Not with fetchmail, but I use them with postfix and alpine, so 
> fetchmail should be the same. Just be careful to create one such 
> password for eeach application and machine, don't reuse them.
>
> Someone mentioned he saw a message from Google telling him that he 
> seemed to be attempting to use "less secure applications" without 
> using oauth2, but as long as they don't close the road, that's fine.

Found the reference, a post on usenet (comp.mobile.android) by Frank 
Slootweg:

+++-----------------
   Anyway, I just searched the 'Google Account Help' and found this page
which explains things:

'Sign in with backup codes'
<https://support.google.com/accounts/answer/1187538?hl=en>

   FWIW, I indeed use it as my*backup*  method, in case the normal method
fails for some reason.
   BTW, on the issue of App Passwords, adding insult to injury, when I
got to the 'Sign in with backup codes' page, it showed a header saying:

"It looks like you're using App Passwords to give third-party apps
  access to your account, [deleted]. To make your account more secure,
  disable App Passwords and use "Sign in with Google" to connect apps to
  your Google Account."

   They are*really*  trying to get us to use "Sign in with Google",
aren't they!?
:-(
-----------------++-


Another poster (Arlen) said:


+++-----------------
<https://support.google.com/accounts/answer/1187538>

Sign in with backup codes
If you lose your phone or otherwise can't get codes by text, call, or Google
Authenticator, you can use backup codes to sign in to your Google Account.

Important:

Once you use a backup code to sign in, that code becomes inactive.
You can get a new set of 10 backup codes whenever you want. When you create
a new set of codes, the old set automatically becomes inactive.
To use backup codes, 2-Step Verification must be on.

Create & find a set of backup codes
To store your backup codes somewhere safe, you can print a copy of your
backup codes.

... ((skipping phone instructions)

*On your Computer*
Go to your Google Account.
On the left, click Security.
Under "Signing in to Google," click 2-Step Verification. You may need to sign in.
Under "Backup codes," click Continue .
 From here you can:
Get backup codes: To add backup codes, click Get backup codes.
Create a new set of backup codes and inactivate old ones: To create new codes, click Refresh  .
Delete your backup codes: To delete and automatically inactivate your backup codes, click Delete Delete .
Download your backup codes: Click Download Codes  .
Print your backup codes: Click Print
-----------------++-

Side note: posts to this list take 20 minutes to appear.

-- 
Cheers / Saludos,

		Carlos E. R.
		(from 15.3 x86_64 at Telcontar)