Security guidance is comparing two ways of handling two-factor authentication codes: storing them inside a password manager alongside saved passwords, or keeping them in a separate dedicated authenticator app. Password managers combine both login factors in one vault for convenience, while authenticator apps keep the second factor physically separate from the password itself, generating or sending one-time codes through methods like text messages, push notifications, email, or in-app codes.
engadget.com
· 2026-09-23
Passkeys replace a secret you know with a key your device holds. That single change removes most of what makes phishing work, and it changes how account recovery should be set up.
gokawiil.com
· 2026-09-22
Google is rolling out a new 'Copy code' shortcut in Gmail that appears beneath the subject line of verification emails, letting users copy a 2FA code straight to their clipboard without opening the message. The feature is live on Gmail for Android version 2026.09.07.x and iOS version 6.0.260907, though it hasn't reached the web version yet.
androidauthority.com
· 2026-09-21
A Hacker News user described being locked out of Google, banking, email and Drive accounts after their phone was stolen, since 2FA and account recovery relied on that device and an old email they could no longer access. The poster noted Google's automated recovery flow offers only options tied to the lost phone or an outdated backup email, leaving no clear path to a human for help.
news.ycombinator.com
· 2026-09-17
Security researchers are flagging a fresh wave of email scams that no longer follow the old telltale patterns like poor grammar or suspicious links. These updated schemes are polished, convincing, and designed to slip past users who rely on outdated advice from corporate IT departments.
fastcompany.com
· 2026-08-31
GoKawiil