Comment by fogzen
3 years ago
My wife lost her life’s email despite knowing the password. Google didn’t recognize the device, asked to verify using a phone she doesn’t have access to anymore. Despite knowing her login and controlling the recovery email, she couldn’t login. Everything was tied to her email. She lost access to many other accounts connected to the gmail as a well. Lost contacts, lost YouTube account, and on and on. It was honestly traumatic for her, and maddening because she has the password.
Do not use Google for email. Just pay $5/mo for an email service that won’t ruin your life for no good reason.
> My wife lost her life’s email despite knowing the password. Google didn’t recognize the device, asked to verify using a phone she doesn’t have access to anymore. Despite knowing her login and controlling the recovery email, she couldn’t login.
A friend of mine has encountered this with the TOTP authentication code method. During a move from the US to Europe, they lost their phone. Google let them log in to their regular account no problem, but a second account they use infrequently for a social group got locked out when they tried logging a month after the move. The TOTP secret key string is stored in their password manager and Google doesn't say that the password or TOTP key is incorrect, simply that "for your security, you must complete an additional step" by confirming in an app they no longer have.
Maybe I have been doing IT for too long, but knowing the username, password, and any[0] second factor should always be enough. Surprising users with something else, that they might not have, is unacceptable.
0 - I'm willing to forgive if a second factor was recently enabled; maybe the scammer got in and added a new phone number or backup email account or generated emergency access codes. But, configured more than 14 days ago? Must work.
I had this issue.
Next time I visited the city I usually logged in from years ago (i had moved), it worked no problem.
> Just pay $5/mo for an email service that won’t ruin your life for no good reason.
Just because you're paying doesn't mean you won't get into these situations.
Yes… but in Fastmail’s case when I encountered an issue I had a “We appreciate your feedback on your use case. We'll take it into consideration for future product planning.” (which is all I was really asking for) from Neil Jenkins, of JMAP fame, within three messages of mine, starting at the standard support form.
Hey it’s your email, trust Google with it if you want. Just know if you ever run into a situation there is no support and they will not help you regain access.
I didn't say otherwise.