Become a MacRumors Supporter for $25/year with no ads, private forums, and more!

Nest to Require Two-Factor Authentication for All Accounts From This Month

MacRumors

macrumors bot
Original poster
Apr 12, 2001
50,953
12,440


Google will require compulsory use of two-factor authentication for all Nest accounts starting this month, the company has announced.


In other words, users who haven't already enabled smartphone-based 2FA or migrated to a Google account will have to verify their identity via email-based authentication every time they log in. The change was spotted by Engadget in an updated Nest help page:
Earlier this year, we announced that starting in the Spring, we will now require all Nest account users who have not enrolled in two-factor authentication or migrated to a Google account to take an extra step by verifying their identity via email when logging in to their Nest account.

The time has come, and beginning in May, Nest will be adding this new account security feature. When a new login is initiated, you'll receive an email from accounts@nest.com with a six digit verification code to be entered in order to successfully sign in. This code is to verify it is you trying to access your account and without this code, you will not be able to log in.
As mentioned, the intention to switch all accounts to 2FA was announced earlier this year, following reports that Nest security cameras across the U.S. were being hacked.

Google responded to those stories by explaining that their systems hadn't in fact suffered critical security breaches. Rather, affected users had failed to use unique passwords and the compromised accounts were the result of "credential stuffing attacks," where hackers logged into Nest accounts using login credentials leaked in older unrelated data breaches.

Google says it will notify users before making the 2FA security change. Until then, it advises Nest owners to ensure they still have access to the email they use for Nest.

Article Link: Nest to Require Two-Factor Authentication for All Accounts From This Month
 

nylonsteel

macrumors 65816
Nov 5, 2010
1,310
283
2 factor auth has worked fine for me
sense of better security - though sometime a pain depending on implementation
rather have than not have it
 
Comment

Damian83

macrumors regular
Jul 20, 2011
147
25
It's 2020, everyone should have 2FA enabled and every company should have 2FA for all accounts... I'm looking at you Netflix.

companies can put even 100FA, but giveme the option to disable it. typical situation: im on holiday and i lose my phone. In the past was enough to login to my icloud from any pc and recover contacts and passwords for other accounts. Now its impossible.Whats the point af a so secure system that avoid entrance to anyone INCLUDING ME??? Customized secret questions was a perfect balance of security/ease of login. 2FA? I hope ill never have a situation like the one i described above...
 
Comment

LeadingHeat

macrumors 6502
Oct 3, 2015
373
912
I hope they allow other forms than just an email for 2FA. If this is to prevent “hackers” where they entered the same password somewhere else on the internet... don’t you think the chances of that person using the same password for their email is pretty high? This would add a little more time getting into the account, but it definitely wouldn’t prevent the hacker as well as say a phone number or even a TOTP card would.
 
Comment

hamstation

macrumors member
Sep 10, 2014
40
8
Confused on how this works.Does this mean every single time I want to view my cam live mode I have to get a code via email to enter first?what does this mean? I do log in with my google acc.
Google today still recommends that you “consider migrating to a Google Account if it’s right for you.”

2 factor auth has worked fine for me
sense of better security - though sometime a pain depending on implementation
rather have than not have it
 
Last edited:
Comment

TonyC28

macrumors 68000
Aug 15, 2009
1,990
5,735
USA
The only Google products I own are Nest products so I see no point in migrating to a Google account. Am I missing something?
 
  • Like
Reactions: Huck and ajfahey
Comment

justperry

macrumors G4
Aug 10, 2007
11,383
7,733
I'm a rolling stone.
Going overboard, I don’t need or want 2FA to check or set the temp of my thermostats...
I would just like my thermostat to work.
Is it going to email me very time I want to change the temperature via their applications?

F that, if that happens I will get rid of it ASAP.
Wish I knew Google owned Nest when I bought mine, I would not even think about it for a sec.
I despise Google.

Now, I do have a Controller for my Ubiquiti stuff, the nest is not collecting stuff right now.
 
Last edited:
Comment

michael31986

macrumors 68040
Jul 11, 2008
3,999
570
Everytime I log in it’s going to ask for this?
Like Everytime I go into the app?
Someone explain
 
Comment

4jasontv

macrumors 68040
Jul 31, 2011
3,617
3,937
Gosh. I sure hope somewhere there is a quarantined lawyer somewhere who though they were retired but realized after being home so long that they can still make the world a better place by addressing this idea that companies can sell hardware with a provision that allows them to break original functionality.
 
  • Like
Reactions: jocamero
Comment

DotCom2

macrumors 601
Feb 22, 2009
4,758
3,265
I love my Nest thermostats. They've saved me money on energy. I HATE THAT THEY ARE OWNED BY GOOGLE. I have not signed up for a google account even though they keep asking me. I'll have to wait and see how this 2FA works. If you have to go through that every time you use the app, that is not acceptable. The devil is in the details I guess.
 
Comment

marlec1

macrumors newbie
May 5, 2020
1
2
Google already sends all of their feeds to the NSA so, why make it hard just to the end user to get into their account ?
[automerge]1588687089[/automerge]
I love my Nest thermostats. They've saved me money on energy. I HATE THAT THEY ARE OWNED BY GOOGLE. I have not signed up for a google account even though they keep asking me. I'll have to wait and see how this 2FA works. If you have to go through that every time you use the app, that is not acceptable. The devil is in the details I guess.
No, the devil works at Google !!!
 
Comment

hamstation

macrumors member
Sep 10, 2014
40
8
This from nest chat minutes agao.

No Jeffery, you won't have to be login in every time, this security measure for when you login from a new device. If your phone already has your login credentials setup you do not have to go through this process.
Yes as long as you access through a device with your credentials already setup you do not need to do this.
for using a new device .
That is correct, it will ask for the two steps, then you can save your credentials like you have with your phone and PC.
 
Comment

ateslik

macrumors 6502
Oct 18, 2008
343
455
I can't believe I'm actually considering spending several hundred dollars on a different thermostat because I'm being forced into Google's tracking program. Jesus.

The Honeywell Home T9 looks alright. It's not as sexy as the Nest, but it supports Homekit!
 
Comment
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.