Page 9 of 9 FirstFirst ... 789
  1.    02 Jan 2017 #81
    Join Date : Jan 2014
    Posts : 1,391
    Windows 10 Pro (32-bit) 16299.15

    Quote Originally Posted by dencal View Post
    David.
    How do you open your e-mail.....do you open BT webpage, click on link "e-mail", then sign in using BT e-mail address and password.

    If so then you must have two step registration with BT.....if so blame BT for security lapse.

    Yahoo have no idea what your BT password is or any security questions you made with BT in opening an account.
    It is not you opening Yahoo, it is BT using your logging in details.

    BT are solely responsible for any security if wording stated after @****** has any connection to any British Telecom affiliates.
    Yahoo are just a service used by BT to deliver.
    There is no 2-step verification option or anything like it.

    I login via a BT page but it takes me to a BT-Yahoo page.

    BT emailed me last month to say I needed to change my password and security question, because of the Yahoo breach - and in fact threatened to lock my account if I didn't make the change within 7 days. However much that may sound like a scam email, I checked through another route and it was 100% genuine - lots of other folk got the same email too.
      My ComputerSystem Spec
  2.    02 Jan 2017 #82
    Join Date : Oct 2014
    Posts : 2,457
    W10 Pro + W10 Preview

    Quote Originally Posted by DavidY View Post
    There is no 2-step verification option or anything like it.

    I login via a BT page but it takes me to a BT-Yahoo page.

    BT emailed me last month to say I needed to change my password and security question, because of the Yahoo breach - and in fact threatened to lock my account if I didn't make the change within 7 days. However much that may sound like a scam email, I checked through another route and it was 100% genuine - lots of other folk got the same email too.
    David.
    Of course it takes you to a Yahoo page......Sky does the same for me.

    To register with BT you must have two step verification.....ie:- security questions, password. etc
    Open your BT account to confirm.

    Please re-read carefully my last post to fully understand.
      My ComputersSystem Spec
  3.    02 Jan 2017 #83
    Join Date : Apr 2015
    Posts : 12,819
    W10Prox64

    I have a friend whose yahoo mail was hacked a few years ago - pw by brute force (I know this for sure, as his wife had changed it from a very secure pw I had setup, to a very simple pw which was easy to remember and easy to hack).

    The hacker immediately went into the account and set it up so that all replies to any email would be forwarded to him - to an alias email which was identical except for one character. This way, anyone "replying" would likely not notice the difference.

    He then proceeded to go through the existing address list and email all the friends, saying he was out of the country, had been robbed, and needed some money to pay his hotel bill and get on a plane home. The thing is, my friend travels regularly out of the country, and happened to be out of town at that very moment, so it was quite believable.. I got one of these fake emails, immediately noticed the incorrect return email address, and alerted my friend. In the meantime, I was having a fun conversation with the hacker.......
      My ComputerSystem Spec
  4.    02 Jan 2017 #84
    Join Date : Jan 2014
    Posts : 1,391
    Windows 10 Pro (32-bit) 16299.15

    Quote Originally Posted by dencal View Post
    David.

    To register with BT you must have two step verification.....ie:- security questions, password. etc
    Open your BT account to confirm.
    That's just recovery options.

    Two-step verification is something that you get asked every time you login (or every time you login from a device which isn't previously verified). Typically it uses something else in addition to your computer (usually a mobile phone), in conjunction with your password, to give more evidence that it is really you trying to login.
    For instance this is how it works on a Microsoft account.
    https://support.microsoft.com/en-gb/...p-verification

    I believe that pure Yahoo users can switch on 2-step verification, and it should help give some more defence against hackers (although using SMS messages is far from foolproof). This was what MartinO was referring to earlier.

    However BT Yahoo doesn't ask for my security questions when I login- it only asks for passwords, which is just the one step. I hadn't used my security questions for several years until I changed them the other day.
      My ComputerSystem Spec
  5.    02 Jan 2017 #85
    Join Date : Oct 2014
    Posts : 2,457
    W10 Pro + W10 Preview

    Every time I log into my M$ account I only need to use my password having already set up two step verification.
    Its the same with BT, SKY and every other internet provider.
    You obviously do not understand my explanation, perhaps someone else can help.
      My ComputersSystem Spec
  6.    02 Jan 2017 #86
    Join Date : Jun 2014
    Posts : 5,513
    Windows 10 Pro

    Quote Originally Posted by dencal View Post
    Every time I log into my M$ account I only need to use my password having already set up two step verification.
    Its the same with BT, SKY and every other internet provider.
    You obviously do not understand my explanation, perhaps someone else can help.
    I have two step verification setup and I have enter a code that MS sends to my cell phone.
      My ComputerSystem Spec
  7.    02 Jan 2017 #87
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 12,950
    Windows 10 Pro

    The idea of two-step authentication is that the verification is only asked when you sign in to a service, email or any other service from a non-trusted device and browser (non-trusted = a device on which you have not used said service before, or in case you have used the device you have selected not to set it as trusted one).

    Using an Outlook.com email as an example, every time I sign in to Outlook.com from a new (non-trusted) device, or from a new browser on a trusted device, the security code will be asked. If cookies are allowed, this is then saved and no security verification will be asked from once trusted browser and device. There's no time limit, a once trusted device or browser will remain trusted.

    User can of course also select that all or selected devices and browsers will never be trusted and two-step authentication will be required every time simply by not selecting "I sign in frequently on this device. Don't ask me for a code":

    Click image for larger version. 

Name:	image.png 
Views:	36 
Size:	33.4 KB 
ID:	115737

    This way the browser on this device will remain trusted only for duration of this session, and a security verification code will be asked again on next sign in.

    Regarding Microsoft accounts, you have to remember that the same security settings apply to all Microsoft services on a browser; If user has selected to let Outlook.com to ask security verification each sign in, then tells OneDrive.com not to ask the code again on same browser, Outlook.com will also stop asking the code. Trusting OneDrive means that you also trust Outlook.com, and any other Microsoft service you sign in with same email address.

    Other services, like for instance Office 365 for Business and Enterprise limit the time how long a device or browser will remain trusted. By default O365 for Business / Enterprise will ask the security verification again in every 14 days. This can be extended by O365 admin for up to 60 days. However, if user prefers to be asked a security verification code every time, he / she can simply choose not to select "Don't ask again for XX days". Doing this, a two-step authentication will be needed every time from every browser and device:

    Click image for larger version. 

Name:	image.png 
Views:	36 
Size:	31.3 KB 
ID:	115736

    To put it short, a two-step authentication means that user can sign in without any extra efforts on each device and browser he / she has chosen to be a trusted device or browser. Whenever a sign in is attempted from a non-trusted browser or device, authentication is required.

    I like the security I get using two-step authentication. I would not even dream about using an email service that does not offer it.

    Kari
      My ComputerSystem Spec
  8.    03 Jan 2017 #88
    Join Date : Oct 2014
    Posts : 2,457
    W10 Pro + W10 Preview

    Each E-Mail address is unique.
    Each password is unique.

    When setting up an e-mail address with your supplier you will be informed if it has already been registered, and if so you will be offered a choice of alternative amendments....ie- perhaps added numbers.

    Passwords already registered will be rejected.

    These are your two step verifications......already built into the system after registration.
    Quoting the words of a song.....you can`t have one without the other.

    Kari, post explains in more detail when you might need further verification.
    Last edited by dencal; 03 Jan 2017 at 04:43.
      My ComputersSystem Spec

 
Page 9 of 9 FirstFirst ... 789


Similar Threads
Thread Forum
Solved Windows 10 Mail App : Your Yahoo account settings are out of date
I've gone through the write up on solving the problem "Your a/c settings are out of date" available on Microsoft Support Site. On clicking Settings of Mail app-> Manage A/c-> Yahoo a/c, the Yahoo A/c settings opens. There an old password of 16...
Browsers and Email
Can't get past Change User Account Screen
I power up and the log in screen shows, "Change user Name", under that the User Name box and Password box. Then shows the name I have my laptop, "DANNYLAP". Under this is How to log in using a different account... (not sure if my wording is...
User Accounts and Family Safety
Yahoo account won't receive mail
I've started using Mail app in Wndows 10 on a trial basis, on my desktop PC. I've added my Yahoo mail account and can send emails but cannot receive them. I tried using a solution offered in a post on another thread, by logging into my Yahoo...
Browsers and Email
Updating Yahoo Email Account
I have sync'ed my Yahoo email account with Outlook and Gmail. Worked great for a while but am now receiving a message saying "Your Yahoo email settings need to be updated". Can't send or receive with Yahoo email unless I go direct to Yahoo email...
Browsers and Email
We close our Laptop's and it's takes a Long Time to re-start
My wife and I both have HP laptops that has Win 7.... We upgraded to Win 10 and now every time we close or they time out and shut off. It takes a REAL long time to re-start... The ON button is always lit and the WiFi light remains on I had to hold...
Performance & Maintenance
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:22.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums