Is my Gmail account secure with two-factor authentication and proxy settings?

  • Thread starter Thread starter physics kiddy
  • Start date Start date
Click For Summary

Discussion Overview

The discussion revolves around the security of a Gmail account, particularly in the context of a suspicious login notification from an unfamiliar IP address. Participants explore concerns related to phishing, account security measures like password changes and two-factor authentication, and the implications of using proxy servers.

Discussion Character

  • Exploratory
  • Technical explanation
  • Debate/contested

Main Points Raised

  • One participant expresses concern that their Gmail account may have been hacked after receiving a notification about an unusual login from a foreign IP address.
  • Another participant warns about the possibility of phishing emails and suggests verifying the legitimacy of the notification before taking action.
  • Some participants recommend changing the password and performing virus/spyware scans on devices used to access the account.
  • There is mention of two-factor authentication as a security measure that adds an additional layer of protection by requiring a one-time code sent to a phone.
  • One participant explains that using a proxy could result in the appearance of a different IP address, raising questions about the user's actual connection and security.
  • Several participants offer guidance on how to check for proxy settings in different web browsers.

Areas of Agreement / Disagreement

Participants generally agree on the importance of changing passwords and being cautious of phishing attempts. However, there is no consensus on the exact nature of the security threat, with differing views on whether the notification was legitimate or indicative of a hack.

Contextual Notes

Participants express varying levels of familiarity with technical terms related to account security, such as proxies and two-factor authentication, indicating a potential gap in understanding that may affect their ability to assess the situation fully.

Who May Find This Useful

Individuals concerned about email security, particularly those unfamiliar with phishing, two-factor authentication, and proxy usage, may find this discussion relevant.

physics kiddy
Messages
135
Reaction score
1
Today, I found something very unusual with my Gmail account. As soon as I opened my account, I found a message above the inbox saying : Your account has been opened from IP address 87.207.169.224 dynamic.chello.pl, Poland and I am an Indian not a Polish. Gmail suggested me to change my Gmail password as soon as possible. I did the same. But I am still afraid because I believe that my account has been hacked. Now, the terms in the IP address seem technical and I don't understand them. Please help me.
 
Computer science news on Phys.org
well, two things. First make sure that the email you got was not a phishing email. Sometimes you can get fake alerts and these emails can include a link that takes you away from gmail to another site that looks like gmail. The idea to trick you into thinking its gmail and you type in your current username/password to change it and then they steal your information.
if there was a link in the email saying "click here to change your password" or something to that effect, look at the actual address, make sure the address belongs to google.
eg: mail.google.com is valid. mail-google.com is NOT
if you did get one of these phishing emails and you clicked on the link to change your password, then its time to change it again. make sure you use the links within your account and NOT links from inside an email (click on your name>account settings> etc).

if the email is legit, then changing your password is usually good enough. there is an off-chance that your computer may be infected with spyware programs. i'd suggest installing an antispyware program like Spybot Search & Destroy to scan your system.
 
Well, I know what phishing is and I am always cautious of phishing pages because I have tried one on my friend. I am sure it's something else because the link wasn't in inbox. It was above inbox and there was no any link or message like "Click here to change your password". The only message was -"Your account has been opened from so an so IP address". Any idea ?
 
Well then I would change the Gmail account password and do a virus/spyware scan on all the computers you use to access your email. Sounds like the email was legit.
 
Yes, it was
 
Yeah. Just change your password from your Gmail account settings and scan the computers you check your Gmail account from. That's really all you can do if someone actually got your password.
 
physics kiddy said:
Gmail suggested me to change my Gmail password as soon as possible. I did the same.
Did this email provide you with a link where you could change your password? Or did you have to go to Gmail on your own to do it?

If the former case, it is entirely possible you just handed them your password. You should never follow a link within an email that leads you to a site where you are going to enter private information. Emails (especially phishing emails) often provide a fake link that looks legit, but actually skims your private information.

Conscientious companies, such as banks will NEVER provide a link to get to their site for this reason. You are expected to make your own way to their site. That way, you can be sure you got to the right site.
 
If you've accessed GMail through a proxy (perhaps without knowing) that could explain the IP - proxies forward traffic on your behalf, so sites see the proxy's IP (which could be anywhere) rather than your own.

Proxies are sometimes used to circumvent restrictions, such as blocked sites - e.g. a computer lab you use blocks YouTube, but you (or someone else before you) configures the browser to use a proxy instead to access the site. This is still a really bad idea since the owner of the proxy will be able to inspect your traffic, steal active sessions, etc.
 
  • #10
I am a bit new to these technical terms. So, please explain how do I know if I am using a proxy and what two-way authentication is.
 
  • #11
physics kiddy said:
I am a bit new to these technical terms. So, please explain how do I know if I am using a proxy and what two-way authentication is.

For two-factor authentication see the link i included and watch the short video, it explains the concept well.

You can configure your browser to use a proxy, for example in the FireFox options menu, under Advanced -> Network -> Settings. In Chrome under Preferences -> Under the hood -> Change proxy settings. In Internet Explorer it's under Internet Options -> Connections -> LAN Settings.
 

Similar threads

  • · Replies 6 ·
Replies
6
Views
1K
Replies
4
Views
1K
  • · Replies 13 ·
Replies
13
Views
2K
  • · Replies 15 ·
Replies
15
Views
2K
  • · Replies 67 ·
3
Replies
67
Views
8K
  • · Replies 7 ·
Replies
7
Views
2K
  • · Replies 1 ·
Replies
1
Views
1K
  • · Replies 3 ·
Replies
3
Views
4K
Replies
12
Views
2K
  • · Replies 4 ·
Replies
4
Views
2K