Google 2FA

Goals

Google two factor authentication provides an added layer of security for users who choose to use it.

• Provide additional security to users through the use of TOTP (Time-Based One-Time Passcode)
• Prevent hackers from gaining access to user account data
• Legitimize the overall application by providing a solution users are familiar with

Background and strategic fit

Why: Increased security and peace of mind for a variety of user demographics. Product strategy: Utilize google's open source TOTP code to implement 2FA across all platforms.

Assumptions

• Implemented on all platforms
• All other platforms: https://github.com/google/google-authenticator
• Android: https://github.com/google/google-authenticator-android

Requirements

• Advanced User - As an advanced user, I want to know that my account is secure from unwanted hacks but I also want to know the developers behind the application I’m using understand modern security methods and have the ability to implement them for my protection.
• Basic User - As a basic user, I don’t understand how to secure my account and I am happy that the developers of the application I’m using do so that I can have peace of mind when using their software.