Google Requires 2SV for Billions of Gmail Users to Combat Surge in Cybercrime

Google is urging all Gmail users to enhance their account security amid a significant rise in cyberattacks, including a 33% spike in losses totaling over £12 billion in 2024. The company is mandating the activation of two-step verification (2SV) for all users within 15 to 30 days to avoid restricted access, reflecting a broader push to combat increasingly sophisticated phishing and scam attempts. Beyond 2SV, Google advocates moving away from traditional passwords towards more secure authentication methods like passkeys, which use biometric recognition and are resistant to hacking. Despite these advances, adoption varies, with over 60% of Gen X and Baby Boomers still relying on simple, vulnerable passwords, while younger users increasingly prefer modern security tools. Additionally, Google warns of complex phishing attacks exploiting app-specific passwords (ASPs), particularly targeting high-profile individuals, emphasizing the importance of advanced protection programs for vulnerable users. Users are advised to promptly update their security settings via their Google account to safeguard against these evolving threats and prevent potential account lockouts.