Google Now Requires JavaScript for Account Logins

Google Now Requires JavaScript for Account Logins

You certainly take measures to make sure no one breaks into your home, but someone breaking into your critical online accounts can be almost as bad. Google has added a new layer of security to account logins that seems at first like it could be a security problem of its own. Starting now, Google requires JavaScript in order to log into your account via a web browser. Google says it’s for your own good, though.

If you attempt to sign into Google without JavaScript, you’ll just get an error message explaining that “The browser you’re using doesn’t support JavaScript.” In reality, you’ve probably just turned it off. You’ll have to turn it on, switch to another browser, or only access your Google account via mobile apps. You can turn JavaScript back off after you’ve logged in, though.

JavaScript is an integral part of the modern web, but it can also introduce new security threats. However, Google says it doesn’t think there will be a major issue — only 0.1 percent of Google users shut JavaScript off. A lot of sites are entirely broken without JavaScript, so Google is far from alone here.

Google says its use of JavaScript can help keep your account safe even before you’ve logged in. The mysterious “assessment” utilizes JavaScript to detect suspicious behavior that could indicate your account details have been compromised. Google isn’t talking about what exactly it’s looking for in the assessment, and it likely won’t provide more details. It’s better the internet ne’er-do-wells don’t know how Google secures accounts. Presumably, it has something to do with how text is entered.

The error message that appears if you try to log into your account without JavaScript.
The error message that appears if you try to log into your account without JavaScript.

Alongside the new JavaScript-authenticated sign-ins, Google also added tools to alert you to potential security issues after you’ve logged in. There’s an automatic security checkup that suggests ways to harden your account. For example, it might recommend activating two-factor authentication or making sure your mobile devices have a secure lock screen enabled. Google also has a revamped account verification system in the event someone does gain access. You can see what account settings have changed and check activity on payment methods in your account.

The JavaScript and new security monitoring tools started rolling out to all accounts on Oct. 31, which wasn’t only Halloween. It was also the last day of Cybersecurity Awareness Month.

Continue reading

VIA Technologies, Zhaoxin Strengthen x86 CPU Development Ties
VIA Technologies, Zhaoxin Strengthen x86 CPU Development Ties

VIA and Zhaoxin are deepening their strategic partnership with additional IP transfers, intended to accelerate long-term product development.

Cyberpunked 2077: CDPR ‘Apologizes’ For Releasing Broken Game, Offers Refunds
Cyberpunked 2077: CDPR ‘Apologizes’ For Releasing Broken Game, Offers Refunds

Cyberpunk 2077's PS4 and Xbox One S version is so bad, the company is now offering refunds. We recommend last-gen console gamers take them up on it, rather than waiting.

CDPR Apologizes for Cyberpunk 2077 Launch, but Explains Very Little
CDPR Apologizes for Cyberpunk 2077 Launch, but Explains Very Little

CD Projekt Red has apologized for the state of Cyberpunk 2077 on last-gen consoles at launch, but it's explanation of what happened and why is scanty at best.

Paleontologists Might Have Discovered the Largest Dinosaur That Ever Lived
Paleontologists Might Have Discovered the Largest Dinosaur That Ever Lived

Scientists excavating a new species of dinosaur in Argentina have reported that the specimen might be the largest that ever lived. Even if it doesn't set a record, the animal was much bigger than anything alive today.