Why 2step protection is needed?
You might be using the same password in another no secure site.
The machine you used might have keylogger installed.
Someone could have spotted the password you typed it.
Protect your account with Google 2-step verification
When you log in from a computer you don't normally use, we'll ask you for your password and a code that you receive on your phone. This will help prevent strangers from accessing your account with just a stolen password.
Steps to configure in a Computer
Step 1: Enter your password
Step 2: Enter a code from your phone
You can get codes via SMS or a voice call, from a mobile app, or print codes to use while traveling.
Step 3: Don't worry, you can remember approved computers for 30 days
You'll only have to use your phone when you sign in from an unrecognized computer or device.
Printable backup codes offer a way to access your account if your phone isn't available. Each code will allow you to sign in one time.
Warning: If your phone is unavailable, these codes will be the only way to sign in to your account. Keep them someplace accessible, like your wallet.
It is not a matter of having so many passwords, it has to do with the fact that if a Hacker got into your account ie android/ipod/ipad/iphone/blackberry being lost, you can revoke the password on that device so that they can no longer access your email account, thus securing your email, and making it less of a issue for having to change your password to your email.
This is a completely genius way of keeping up with security, plus it makes it easier all in all.
To create application-specific passwords for login from Mobile Device, visit:
https://accounts.google.com/IssuedAuthSubTokens
I think this is a brilliant idea. Obviously not perfect or impenetrable, but a darn good start, don't you think?
Video Steps
How it works - Accounts Help http://bit.ly/p2kZxq
Using 2-step verification - YouTube http://bit.ly/nFzL3u
