I would like to protect a Gmail account from being hacked. Suppose I use the following approach for login/authentication:

  • Username, Password
  • 2FA via security stick
  • the stick is in a place that is not accessible to the attacker

Is there a realistic attack to be feared under these conditions?

  • What about backup codes? Are they secured in a vault or encrypted? Jan 8 at 20:14
  • Good point. They are secured in a vault.
    – fkarger
    Jan 8 at 20:16


You must log in to answer this question.