topic Re: Account recovery feature in Peer-Peer Topics

Account recovery feature

panderson — Tue, 17 Oct 2023 15:38:37 GMT

So one of the things that I think is really great is getting emails whenever my account is logged into on a new device. I think it is a great security feature, so I recommended it to other staff. Then I found out that because we are a "Primary/Secondary" organization, they don't get the option of recovering their password or account. I really don't care about either of those options, I would just like them to be able to get the notification email of when their account is logged into on a new device, etc. Does anyone know if there is a way for us to be able to do that? If they have a home email address entered, would it go there?

Here is the link that I found, that explains why the "Account Recovery" option is not available.

https://support.google.com/a/answer/33382?amp;p=accnt_recovery_users&rd=1&product_name=UnuFlow&visit_id=638331525329058975-1433922457&p=accnt_recovery_users&rd=2&src=supportwidget0#details&zippy=%2Cwhen-user-password-recovery-isnt-available

Kind of disappointing in my opinion.

Re: Account recovery feature

Kim_Nilsson — Mon, 23 Oct 2023 12:29:09 GMT

But, is this notification really connected to the Password Recovery feature? I also get such notifications on accounts where I don't have any PR set up.

Re: Account recovery feature

panderson — Tue, 31 Oct 2023 16:05:45 GMT

I should have clarified, it sends the notification to the account that is set up in the password recovery area and not just to the account accessed. If someone hacks the account, the first thing that they do is delete the email, so unsuspecting individuals have no idea their account has been compromised.

Re: Account recovery feature

Kim_Nilsson — Tue, 31 Oct 2023 17:14:04 GMT

Ah, got it. Such notifications are sent to the alternate/recovery email IF there is such an email. Else they are sent only to the account email itself.

Re: Account recovery feature

Kelly_McMahon — Wed, 01 Nov 2023 16:33:50 GMT

Our students get "security alerts" when their account is used to log into another device. I don't recall doing any special setup for this. Also we are a K-8 school and only email within the domain are allowed for students but they do get google classroom notifications and these security alerts.

Re: Account recovery feature

panderson — Wed, 01 Nov 2023 17:17:55 GMT

Yes, the alerts go to the user's email, but if an account is compromised, the attacker will delete the email as soon as they log in and the user will never see it. When an admin logs in, it goes to their email address and the recovery account, there is no setting for regular users of the organization, because they can't recover their accounts, so there is no way to set it up. I think that they probably could go through all the steps to create a filter to forward those emails to another account, which should work because it would happen as soon as the account was logged into.

Re: Account recovery feature

Kelly_McMahon — Wed, 01 Nov 2023 17:19:41 GMT

I see where you are going with this. Interesting idea

Re: Account recovery feature

MColeman — Wed, 08 Nov 2023 15:57:16 GMT

Not sure if this will help you out, but you can set the recovery password on an under-18 account using GAM. At least it shows up in the admin console in Recovery Information for the user. I don't know if it would then send the email or not. The command is : gam update user <user email> recoveryemail ""<recovery email>""

Re: Account recovery feature

panderson — Wed, 08 Nov 2023 17:18:55 GMT

Cool, I will have to check it out. My first concern is staff, although we do have them all using two-factor, but will try it with a student account too, and see if it actually works.

Re: Account recovery feature

Kim_Nilsson — Wed, 08 Nov 2023 17:52:08 GMT

A person with 2FA shouldn't need a recovery email/number.

Unless you are dealing with an old AppleID, in which case you better hope they do, because that's a horrible mess otherwise.