Google to turn on two-factor authentication by default for millions of users
theverge.com
theverge.com
I can see some valid reasons for doing this, and imagine there are subtleties, but it is still a pain. At least it is an important account. It reminds me of needing to create an account with a secure password for one of my kids for a game site -- if it was hacked, it wouldn't matter at all. If an account was required, it hardly needed to be secure -- why not have something where my kid could actually remember the password?