In 2 Step verification, do NOT show the FULL linked email address. Just show the first letter and email service company.
In 2 Step verification, do NOT show the linked email address. Just show the first letter and email service company, e.g. s******@gmail.com.
Reason? I just got a phishing email at my s******gmail.com account saying that someone accessed my yahoo email with my password. I have 2 step verification though and this was odd. I then went to my yahoo email and saw the same message. I changed my email password on both accounts and in doing so, realized that during the 2 step verification with yahoo, they give you two choices to send the code. One of these choices showed my FULL gmail email address, allowing a hacker to send a phishing email to my linked account.
If yahoo doesn't show the full email address in 2 step verification, this will reduce the number of phishing emails.
Yahoo please do not show the FULL email address of the linked account during 2 step verification.