Skip to main content

Blogger Authentication Uses Demographic Details

If you use Google Two-Step Verification, you will have a better chance of being able to recover Blogger account access, if you forget the account name or password.

Alternately, use of 2-Step Verification may prevent account hijackings and blog theft, when you must use a computer that's not yours, or when you travel - as long as you carry your authentication device / tokens with you.

As an alternative or complement to 2-Step Verification, Blogger recognises us using demographic details. People who consistently use the same browser, on the same computer, in the same location, and from the same Internet service, are easily recognised, are trusted more - and are less likely to receive secondary challenges.

Demographic detail authentication was first seen by people who travel, when asked to prove identity.

Recently, this policy appears to be used when you need to recover account access, when you login using a different computer, or possibly when you return to a long unattended blog.

Degree of difference, from normal, varies need for authentication.

Any changes in demographic detail, such as using a different browser or computer, a different Internet connection, or in a different location, appears to result in a different level of need for extra authentication.

A routine login would represent a small need for authentication, while an account recovery (caused by forgotten account name or password) would represent a greater need. Using a different browser, on the same computer in the same location, may cause a small need for authentication.

Using ones own computer, in a different location in the same country, would cause a moderate need for authentication; and using a different computer in that country a slightly larger need. And using a coffeeshop computer, in a foreign country like Nigeria or Ukraine, would cause a much larger need.

A different level of need causes different secret detail requests.

Based on the level of need for authentication, Blogger may present a secondary challenge, and request one or more secrets from the supposed blog owner - or possible would be blog thief. Here's where the annoying detail questions - about use of other Google services, and dates first and last used - become relevant.

For people who have had their Blogger account hacked and blogs stolen, or people who fear this fate, demographic detail authentication may be seen as a positive direction for Blogger / Google to take, For people who fear "Big Brother", with the never avoidable cameras and total lack of privacy, an authentication process which tracks each of us, as we login, may be considered a privacy threat.

Privacy threat or security enhancement - demographic verification is here to stay.

Whether a privacy threat, or security enhancement, demographic detail verification appears to be part of Blogger / Google Security - and may enhance or substitute for, Google 2-Step Verification. And that should reduce the threat of stolen blogs.

Comments

Popular posts from this blog

What's The URL Of My Blog?

We see the plea for help, periodicallyI need the URL of my blog, so I can give it to my friends. Help!Who's buried in Grant's Tomb, after all?No Chuck, be polite.OK, OK. The title of this blog is "The Real Blogger Status", and the title of this post is "What's The URL Of My Blog?".

Leave Comments Here

Like any blogger, I appreciate polite comments, when they are relevant to the blog, and posted to the relevant article in the right blog. If you want to ask me a question thats relevant to blogging, but you can't find the right post to start with (I haven't written about everything blogger related, yet, nor the way things are going I don't expect to either), ask your questions here, or leave an entry in my guestbook.

As noted above, please note my commenting policy. If you post a comment to this post, I will probably treat it as a "Contact Me" post. If you have an issue that's relevant to any technical issue in the blog, please leave a comment on the specific post, not here. This post is for general comments, and for non posted contact to me.

If the form below does not work for you, check your third party cookies setting!

For actual technical issues, note that peer support in Blogger Help Forum: Something Is Broken, or Nitecruzr Dot Net - Blogging is, almos…

What Is "ghs.google.com" vs. "ghs.googlehosted.com"?

With Google Domains registered custom domains becoming more normal, we are seeing one odd attention to detail, expressed as confusion in Blogger Help Forum: Learn More About Blogger.My website uses "ghs.google.com" - am I supposed to use "ghs.googlehosted.com", instead?It's good to be attentive to detail, particularly with custom domain publishing. This is one detail that may not require immediate attention, however.