Companies like Google have typically offered users the choice of enabling the feature, but now it seems that Google wants to enable it by default for all users. According to Google, “Today we ask people who have enrolled in two-step verification (2SV) to confirm it’s really them with a simple tap via a Google prompt on their phone whenever they sign in. Soon we’ll start automatically enrolling users in 2SV if their accounts are appropriately configured.”
For those wondering what it means to be “appropriately configured”, basically you can go to Google’s Security Checkup and make sure you have details filled out, like phone numbers or a secondary email address that you can use to verify your account in case your primary account is compromised or you forgot your password.
This is actually a good move on Google’s part which hopefully will lead to less compromised accounts in the future. In the meantime, you can also check out our guide on how to use a password manager if you’d like to learn how to create strong passwords and have a handy way of remembering them.