Google gets tougher on suspicious Google Apps logins

Don't lose your smartphone: To thwart unauthorized access to Gmail and other services, Google is bringing aspects of dual-factor authentication to those who haven't signed up for it.
by Stephen Shankland @stshank   14 May 2014 12:53 PM BST In an effort to block unauthorized use of its Google Apps services, Google plans to require users to verify their identity with a text message if the company detects a suspicious login attempt.The mechanism, which will apply to logins over the Web, is in effect a form of dual-factor authentication even for those who haven't signed up for that feature explicitly.
Dual-factor authentication requires two steps, typically a password and a code generated by a smartphone app or text message. It involves extra work to log on, but because it increases security significantly, it's arriving at sites including Google, Yahoo, Microsoft, Twitter, Dropbox, and LastPass as a way to better protect accounts.
 
Full Article