Nest to Require Two-Factor Authentication for All Accounts From This Month

[MacRumors]

Google will require compulsory use of two-factor authentication for all Nest accounts starting this month, the company has announced.

In other words, users who haven't already enabled smartphone-based 2FA or migrated to a Google account will have to verify their identity via email-based authentication every time they log in. The change was spotted by Engadget in an updated Nest help page:

Earlier this year, we announced that starting in the Spring, we will now require all Nest account users who have not enrolled in two-factor authentication or migrated to a Google account to take an extra step by verifying their identity via email when logging in to their Nest account.

The time has come, and beginning in May, Nest will be adding this new account security feature. When a new login is initiated, you'll receive an email from accounts@nest.com with a six digit verification code to be entered in order to successfully sign in. This code is to verify it is you trying to access your account and without this code, you will not be able to log in.

As mentioned, the intention to switch all accounts to 2FA was announced earlier this year, following reports that Nest security cameras across the U.S. were being hacked.

Google responded to those stories by explaining that their systems hadn't in fact suffered critical security breaches. Rather, affected users had failed to use unique passwords and the compromised accounts were the result of "credential stuffing attacks," where hackers logged into Nest accounts using login credentials leaked in older unrelated data breaches.

Google says it will notify users before making the 2FA security change. Until then, it advises Nest owners to ensure they still have access to the email they use for Nest.

Article Link: Nest to Require Two-Factor Authentication for All Accounts From This Month

 

[btrach144]

It's 2020, everyone should have 2FA enabled and every company should have 2FA for all accounts... I'm looking at you Netflix.

 

[nylonsteel]

2 factor auth has worked fine for me
sense of better security - though sometime a pain depending on implementation
rather have than not have it

 

[Damian83]

It's 2020, everyone should have 2FA enabled and every company should have 2FA for all accounts... I'm looking at you Netflix.

companies can put even 100FA, but giveme the option to disable it. typical situation: im on holiday and i lose my phone. In the past was enough to login to my icloud from any pc and recover contacts and passwords for other accounts. Now its impossible.Whats the point af a so secure system that avoid entrance to anyone INCLUDING ME??? Customized secret questions was a perfect balance of security/ease of login. 2FA? I hope ill never have a situation like the one i described above...

 

[LeadingHeat]

I hope they allow other forms than just an email for 2FA. If this is to prevent “hackers” where they entered the same password somewhere else on the internet... don’t you think the chances of that person using the same password for their email is pretty high? This would add a little more time getting into the account, but it definitely wouldn’t prevent the hacker as well as say a phone number or even a TOTP card would.

 

[x-evil-x]

It's 2020, everyone should have 2FA enabled and every company should have 2FA for all accounts... I'm looking at you Netflix.

Why do you need it for Netflix?

 

[hamstation]

Confused on how this works.Does this mean every single time I want to view my cam live mode I have to get a code via email to enter first?what does this mean? I do log in with my google acc.
Google today still recommends that you “consider migrating to a Google Account if it’s right for you.”

2 factor auth has worked fine for me
sense of better security - though sometime a pain depending on implementation
rather have than not have it

 

[azentropy]

Going overboard, I don’t need or want 2FA to check or set the temp of my thermostats...

 

[EchoplexSE]

When are they going to stop spamming me to migrate to a Google account? Because it’s not happening

 

[xnu]

I would just like my thermostat to work.

 

[sananda]

Is it going to email me very time I want to change the temperature via their applications?

 

[TonyC28]

The only Google products I own are Nest products so I see no point in migrating to a Google account. Am I missing something?

 

[H2SO4]

I would just like my thermostat to work.

Do you mean that's all you want it to do or are you saying it doesn't work properly?

 

[justperry]

Going overboard, I don’t need or want 2FA to check or set the temp of my thermostats...

I would just like my thermostat to work.

Is it going to email me very time I want to change the temperature via their applications?

F that, if that happens I will get rid of it ASAP.
Wish I knew Google owned Nest when I bought mine, I would not even think about it for a sec.
I despise Google.

Now, I do have a Controller for my Ubiquiti stuff, the nest is not collecting stuff right now.

 

[Stella]

Why do you need it for Netflix?

Access to account details.

 

[michael31986]

Everytime I log in it’s going to ask for this?
Like Everytime I go into the app?
Someone explain

 

[saulinpa]

The only Google products I own are Nest products so I see no point in migrating to a Google account. Am I missing something?

Google wants to kill anything Nest. It is to be a marketing logo only.

 

[zorinlynx]

Nest can go piss up a tree until they enable HomeKit support.

 

[Yr Blues]

They just lost a buttload of customers by doing this.

 

[4jasontv]

Gosh. I sure hope somewhere there is a quarantined lawyer somewhere who though they were retired but realized after being home so long that they can still make the world a better place by addressing this idea that companies can sell hardware with a provision that allows them to break original functionality.

 

[DotCom2]

I love my Nest thermostats. They've saved me money on energy. I HATE THAT THEY ARE OWNED BY GOOGLE. I have not signed up for a google account even though they keep asking me. I'll have to wait and see how this 2FA works. If you have to go through that every time you use the app, that is not acceptable. The devil is in the details I guess.

 

[marlec1]

Google already sends all of their feeds to the NSA so, why make it hard just to the end user to get into their account ?
[automerge]1588687089[/automerge]

I love my Nest thermostats. They've saved me money on energy. I HATE THAT THEY ARE OWNED BY GOOGLE. I have not signed up for a google account even though they keep asking me. I'll have to wait and see how this 2FA works. If you have to go through that every time you use the app, that is not acceptable. The devil is in the details I guess.

No, the devil works at Google !!!

 

[DavisEngeler]

To those of you freaking out about having to do this every time you change your temperature, just ask yourself... Does the app currently require you to log back in every time you use it?

No.

MFA like this is happens at login.

 

[hamstation]

This from nest chat minutes agao.

No Jeffery, you won't have to be login in every time, this security measure for when you login from a new device. If your phone already has your login credentials setup you do not have to go through this process.
Yes as long as you access through a device with your credentials already setup you do not need to do this.
for using a new device .
That is correct, it will ask for the two steps, then you can save your credentials like you have with your phone and PC.

 

[ateslik]

I can't believe I'm actually considering spending several hundred dollars on a different thermostat because I'm being forced into Google's tracking program. Jesus.

The Honeywell Home T9 looks alright. It's not as sexy as the Nest, but it supports Homekit!