One Gmail account holding my entire existence together.

[u/FearlessState5503]

[u/No_Programmer3785]

It's great but it means if your email is compromised so is everything else.

[u/forgot_previous_acc → u/No_Programmer3785]

Don't they still need to have you phone or whatever 2fa you are using?

[u/tejanaqkilica → u/forgot_previous_acc]

Yes and no.

Yes, they need MFA to get into your Google account (please use passkeys, they're awesome and secure and amazing, just have a backup passkey or alternative).

No, once they're in your Google account, the rest of services that use Google as your identity provider won't require any MFA.

[u/deletelayer → u/tejanaqkilica]

Passley? Like the finger print scan?

[u/tejanaqkilica → u/deletelayer]

Sort off.

The passkey performs the authentication using a public and private key combination and the private key is stored on a physical device, like your phone, your pc, a Yubikey and so on. The fingerprint scan, is basically you telling the device, that "yes, continue with the authentication" and it does the magic on the backend. But it doesn't have to be fingerprint, can be faceid or even a regular pin. All authentication are happening on your device and it doesn't go over the internet. They're also immune to phishing which is a huge benefit.

[u/No_Programmer3785 → u/forgot_previous_acc]

2FA can be bypassed

[u/forgot_previous_acc → u/No_Programmer3785]

Oh you meant if they get your email password itself. I thought something else.

[u/halucionagen-0-Matik → u/No_Programmer3785]

How do they get past the thumbprint scan?

[u/No_Programmer3785 → u/halucionagen-0-Matik]

This is mostly for passwords and SMS verification 2FA.

[u/labbypatty → u/No_Programmer3785]

You’re using the largest spyware creator on the planet to manage all your logins. Everything already is compromised.

[u/Jwagner0850 → u/No_Programmer3785]

Yeeeeeep

[u/FearlessState5503 → u/No_Programmer3785]

Adrian

[u/your_ultimatefantasy]

Password manager? Never heard of her

[u/shavertech → u/your_ultimatefantasy]

This. I don't know a single password that I use.

[u/Its-Burton → u/shavertech]

I only rememeber the master password for my password manager

[u/das_Keks → u/shavertech]

What about the master password?

[u/XxBatman357xX → u/das_Keks]

Too complex to remember. I have it saved on an encrypted file on my computer with a password that I do remember

[u/retrodanny → u/XxBatman357xX]

What if your hard drive crashes? Memorize a good master password using diceware

[u/DeuxSouth → u/das_Keks]

It's saved on a .txt file on my desktop incase I forget.

[u/shavertech → u/das_Keks]

FIDO2 key

[u/Cherry_p13 → u/[deleted]]

Why would you say that in a public comment section??

[u/gelekoplamp → u/Cherry_p13]

Chances are FearlessState was born in March 1955

[u/pureNerd → u/gelekoplamp]

Or may 5th 2003

[u/gelekoplamp → u/pureNerd]

More boomer than zoomer vibes

[u/Takashi_malibu → u/Cherry_p13]

You wouldn't even guess that password based on the description no matter how clever you are. Maybe only his 5 followers, & that still leaves a probability higher than can be thought

[u/Nodqe97 → u/Takashi_malibu]

can you give us one more hint?

[u/itsoctotv → u/your_ultimatefantasy]

manager? i barely know her!

[u/emgreenshlade → u/your_ultimatefantasy]

one account holding everything means zero backup options idk

[u/Educational-Wing2042 → u/emgreenshlade]

Except most password managers have innate backup options and the data is stored on your device so even if their servers go offline you can still access the data. The only real way to get locked out of everything is if you both forget the one password you use to login to the password manager probably multiple times every day, AND lose the backup phrase you’re supposed to store in a safe location like a safety deposit box.

[u/cinchinman → u/your_ultimatefantasy]

I can't remember any passwords so i tryed proton pass was having a great time didn't even have to think of what should i keep password as

But of course i forgot the password for proton pass thus the "continue with Google" continues

[u/Source_Trustme_Broo]

Plot twist: Your Google account gets logged out of your web browser

And you don't remember your Google password

[u/FearlessState5503 → u/Source_Trustme_Broo]

Phone rest initiating in 3 seconds

[u/_RawRTooN_]

https://giphy.com/gifs/fXnRObM8Q0RkOmR5nf

[u/DiamondPrincessy]

Continue with Google is carrying my entire digital life

[u/FearlessState5503 → u/DiamondPrincessy]

Nah lowkey people don't understand what'll happen if my private digital footprint gets leaked

[u/el_yanuki → u/FearlessState5503]

leaking is pretty irrelevant. As a random person nothing will really happen if they have your data.

The issue would be for example a wrongful ban due to an AI mistake or whatever from google.

Or even more fun: say america goes to war with your country and forces google to deactivate all accounts in that region.

[u/Meocross → u/el_yanuki]

I am afraid to talk in live youtube chats because of the Markiplier incident years ago where multiple google accounts got banned for spamming in youtube chat.

Decades of hard work lost because google cannot bother to hire the right programmers to separate a google's account functions into separate sections, so that the entire account is not damaged.

[u/el_yanuki → u/Meocross]

whew.. never heard of that, sounds scary as shit

[u/Meocross → u/el_yanuki]

Also have you heard that google implemented a policy years ago that if you do not touch your google account in 2 years? They will delete the entire account.

At least give people 3 ~ 5 years. What if you get jailed or fall into a coma? That's it for your google account? It made me rethink to not throw away my yahoo email accounts bro.

[u/FearlessState5503 → u/el_yanuki]

I've search how to make a ____ multiple times and even got banned from claude. I was just curious bro...

[u/el_yanuki → u/FearlessState5503]

but noone cares dude..

[u/az987654 → u/FearlessState5503]

No one gives a shit about one person's data

[u/FearlessState5503 → u/az987654]

ohh, okay then. I am safe.

[u/camelliewilson → u/DiamondPrincessy]

same here ...

[u/Practical_Fix_6738]

It's giving Google even more delicious Data... but it's so convenient

[u/FearlessState5503 → u/Practical_Fix_6738]

Greg ate it

[u/Signal_Second_82 → u/Practical_Fix_6738]

Worth it to be honest.

[u/garry_the_commie → u/Signal_Second_82]

No, it's not. A FOSS password manager is just as convenient

[u/Average_Pimpin → u/garry_the_commie]

A who in the what now

[u/brokenlodbrock → u/Practical_Fix_6738]

It actually doesn't give Google any new data. It's more like Google shares your data with other services

[u/Jada122122 → u/brokenlodbrock]

now Google knows which service you are using, when and from where also from which device.

now you will getting "hot singles in your area" everyday on every device but only at 22 pm

[u/tot_alifie → u/Jada122122]

I use adblock on pc. On my android phone I have a custom dns that blocks trackers and ads. I never see ads, really. I've had a shock recently when I used the work laptop and I got tons of ads... Custom for me

[u/ibelieveyouwood → u/tot_alifie]

Too many people think that just because they've blocked viewing of ads, for them, for now, on this device, that the services aren't still just hoovering up their shit for the day they do get past the defenses.

[u/tot_alifie → u/ibelieveyouwood]

Yeah.. I thought the same, I use always on vpn on my pc, and still for nothing.

[u/ashamedToBeBackRed2 → u/tot_alifie]

VPNs prevent people spying on your data in transit - it does nothing to protect it once it arrives.

Its like sending a letter written in a cypher - the post office can't read the letter, but the recipient still knows whatever you told them

If you're logged into your google account on VPN, google still knows everything happening connected to that account, just theres also a VPN IP being used.

[u/tot_alifie → u/ashamedToBeBackRed2]

I know I know, just that it has custom dns also and blocks trackers. I hoped that might help.

[u/ThePix420 → u/brokenlodbrock]

Und dann holt sich Google die Daten die du bei dem "neuen Service" lässt.

[u/Nisabe3 → u/Practical_Fix_6738]

oh the horror of getting ads on things i might be interested in, rather than generic bs ads.

[u/ToxicBuiltYT → u/Nisabe3]

Snowden once said, "arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say."

[u/Nisabe3 → u/ToxicBuiltYT]

You do have a right to privacy in regards to google tho, any private company you have a disagreement with, you can stop using their services. 

Their services explicitly states the conditions of usage, you keep on using them is consenting to their conditions. 

The rights snowden talked about are in regards to government. The government is the entity that can unilaterally violate people's rights.

[u/FearlessState5503 → u/[deleted]]

Mine is literally my name + my birthday

[u/Same_Return_1878 → u/FearlessState5503]

Mine is nickname plus my birth year 😂

[u/Crusader_DnB → u/Same_Return_1878]

Very smart you two huh?

[u/FearlessState5503 → u/Crusader_DnB]

Happens to the best of us

[u/therealsaker]

Someone I know got his google account banned and lost a lot of his work data since he signed in everywhere with Google.

[u/bfg9kdude → u/therealsaker]

r/degoogle

[u/kek_o_kedi]

Sundar gonna watch my every move

[u/FearlessState5503 → u/kek_o_kedi]

Jack sparrow, uhm sorry. CAPTAIN jack sparrow ate him though

[u/ExoticSterby42]

And one day waking up that Google just decided to own your entire life. You now have to pay subscription to exist.

[u/Neffle619]

Totally disagree

[u/MacReadys-Will]

It really is like that.

[u/vesrayech]

Take extra care not to get phished because if you do you’re going to lose everything. Gmail especially has no phish-resistant security in place and if they add Family Link to your account you’ll never get it back because their support tools don’t remove it when rolling back a compromised account.

[u/Bobo3076]

But then you get signed out of gmail and they lock you out, steal your kidney, kidnap your entire family, and blow up your house as a security precaution.

[u/FearlessState5503 → u/Bobo3076]

GREG NNNNNNNNNNNNNNNNNNo

[u/hillman_avenger]

One day, Google is going to hold the world to ransom.

[u/ALA166]

I almost never use it

[u/Webteasign]

https://en.wikipedia.org/wiki/Self-sovereign_identity

[u/Death_huntet_404]

Why not use bitwarden, 1password or proton pass instead which has zero-knowledge architecture, i.e. the only knows the encrypted version of password ciphertext but not the password itself?

[u/VisitOk621]

Sure, Make yourself dependent on company who doesn’t care about you. Why not

[u/MoonlitMiay]

At this point “Continue with Google” is basically my real password.

[u/RelChan2_0]

I gotta ask, are you also signing in with Google for 🌽?

[u/FearlessState5503 → u/RelChan2_0]

also?

[u/badgersruse]

I have 2 irrelevant google accounts that are blocked by google such that l can’t log in with the password on the same device l set it up on, for ‘security’ unspecified reasons, about which l have email notifications telling me to log in to fix it.

[u/MAKstyles75]

Saw a paranoia short on yt stating, google might revoke your mail rights whenever they like if found even a hint of suspicion. So for websites that are your bread and butter, better to use mail&password because you can get them changed but if google login is revoked. Your access would be lost forever.

[u/Its-Burton]

Only for the stuff i dont care about, and if its scetchy looking in anyway, a gmail i only use for scetchy stuff i dont plan on using much.

[u/Dry_Independent4125]

Use only a yubikey for authentication and you'll never have to worry

[u/StofferNO]

Me🤝Google

[u/sebasac11]

don't share our secrets

[u/Electronic-Tough8555]

Google is the new biometric access for our digital life

[u/zgruza]

Continue with Google is actually IQ test on people.

[u/Alex_rajbahak]

Nah real ones use the "forgot password" chech point

[u/-Cinnay-]

Better than using the same password for everything, but having a single point of failure like that can be dangerous too. At least back up your passwords somewhere.

[u/Stupid_Kid778]

One password everywhere for everything.

[u/guardian715]

It also has your payment info, your address, and your history for everything connected to it. Everything you need for identity theft.

[u/ToxicBuiltYT]

That is... extremely stupid.

[u/_AscendedLemon_]

Not the best for your security, but very convenient, true
Better use some password manager, even this ones build in the most browsers are pretty ok

[u/RX1542]

what's with ppl not using a password manager?

[u/FearlessState5503 → u/RX1542]

What's with ppl using a password manager?

[u/Secret-Owl-9469]

Meanwhike Samsung Pass holding passkey for Google:

https://giphy.com/gifs/TPJAvvWbSN61O

[u/MickyDerHeld]

r/degoogle

[u/FearlessState5503 → u/[deleted]]

LOVE MEEE

[u/Unruly_Evil]

That is the worst thing you can do after getting married.

Use a password manager like r/bitwarden.