AlanApr 8, 2025

"I had an account that looked like it had a recovery email, but then the recovery email section said I had not yet confirmed the recovery email address (using an email code). I don't understand how this happened."

[These are my notes. My account is not at risk]
https://webapps.stackexchange.com/questions/175577/does-google-account-recovery-ever-require-both-a-working-recovery-email-and-work

Does Google Account Recovery ever require BOTH a working recovery email and working recovery phone number?

Some members of Google Account community believed that: Without BOTH a current recovery email AND a current phone number, previously set up in the account, (both must be accessible and up to date)...

Web Applications Stack Exchange
Show threadAlan

^ I'm not best pleased, because Google seemed to have un-verified a recovery email on one of my accounts again.

It does show up as a "recommended action" under "Google Security Check-Up". But I don't think you get actively warned when this happens.

Apr 8, 2025 at 8:02pmWeb
Show threadAlanApr 8, 2025

Possibly what's bugging me, is an old page from when Google enabled 2-Step Verification *automatically* -

- and said you could get back in using your recovery email. I don't think that's how the current design works.
https://support.google.com/accounts/answer/10956730?hl=en&sjid=292379428717602083-EU#zippy=%2Chow-does--step-verification-work-if-i-dont-have-my-phone%2Ccan-i-add-other-backups-to-sign-in%2Cwhen-will--step-verification-be-turned-on

Protecting your personal info with 2-Step Verification - Google Account Help

Google will turn on 2-Step Verification soon for many accounts. Using a second step to sign in is quick and easy, and it makes your Google Account much more secure. How 2-Step Verification works once

Show threadAlanApr 8, 2025
I expect Google's current 2SV recovery process does work for a lot of people, but it's not nearly as clear as Apple's delay-based method.
https://support.apple.com/en-us/118574
How to use account recovery when you can’t reset your Apple Account password - Apple Support

If you use two-factor authentication and can’t sign in or reset your password, you can regain access after an account recovery waiting period.

Apple Support
Show threadAlanJun 15, 2025
I've answered my original question. "The recovery email address for my Google account is marked as "verification needed". What happened?"
https://webapps.stackexchange.com/questions/181354/the-recovery-email-address-for-my-google-account-is-marked-as-verification-need/
Show threadWladimir PalantApr 9, 2025
@sourcejedi I wonder whether Yahoo accounts (or AOL) will still allow you to add a random phone number without verification that will then be used as the only factor for account recovery. https://palant.info/2020/03/09/yahoo-and-aol-where-two-factor-authentication-makes-your-account-less-secure/
Yahoo! and AOL: Where two-factor authentication makes your account less secure

Yahoo! and AOL let anybody controlling the phone number gain access to the account, even if that phone number was never verified.

Almost Secure
Show threadAlanApr 9, 2025

@WPalant

https://knowyourmeme.com/memes/for-the-better-right

For the Better, Right? | Know Your Meme

"For the Better, Right?," also known as the Anakin and Padme 4-Panel and Clueless Padme, is an exploitable image macro format based on screenshots from the

Know Your Meme