Human Performance in Google’s Two-factor Authentication Setup Process

Abstract

Due to the proliferation of online services such as social networking, online banking, and cloud computing, more personal data are potentially exposed than ever before. Efforts such as two-factor authentication (2FA) aim to make these services more secure; however, existing research efforts suggest this may come at the expense of usability. We conducted a usability evaluation of Google's 2FA setup process that confirms this concern, and extends previous efforts by identifying several problem areas and specific usability issues that affect human performance in 2FA setup processes. Future research should include more diverse populations but also continue efforts in improving the usability of 2FA setup processes. This will hopefully lead to increased adoption of 2FA systems.