Google now makes two-step verification mandatory for all Nest users. If you want to log in to an account or in the app, you must do an extra login check via email. 2fa via SMS has been possible for some time, but this is not yet mandatory.
Google had previously said it wanted to better secure Nest accounts that way, but now the company is starting to roll it out. The two-step verification is only required via email. When logging in, users receive an email from [email protected] containing a six-digit code. This is required to continue logging in.
Two-step verification had been an option in Nest accounts for some time, although it was only possible with SMS and not via totp or hardware tokens. It is still possible to turn on SMS verification. Google also points to the option of converting a Nest account into a Google account.
Google wants to better protect users against account intrusions. Last year, the company automatically logged out several users. That happened after it turned out that attackers had watched with several Nest cameras.