OS 7 BlackBerry devices have a dedicated two-step authentication app built for Gmail, but there’s no such luck on BlackBerry 10. That doesn’t mean you can’t leverage the added security measures Google has to offer, though. Just as with many other apps on BB10, you can still get to what you need but it just takes a bit of added effort. Not to worry - we'll help you sort it out in no time at all.
First off, what is two-step authentication? This video sums it up, really.
Basically, this system enables apps to ask for a second password when available, and when it can’t, you can manually generate a revocable password for applications that use Google to sign in to them. Ultimately, this adds an added level of security to your Google account.
ACTIVATE TWO-STEP AUTHENTICATION FOR GMAIL
Start the process of activating two-step authentication here. This will involve a few things, including sending a verification code via SMS to your BlackBerry, and generating new passwords for approved applications. This could be a tedious process for anyone who uses a lot of Google-connected apps regularly.
AUTHENTICATE MOBILE APP
Grab Gauth from BlackBerry World. From your 2-step authentication page, click on the set-up link for BlackBerry. This will provide a code which you enter into Gauth to finalize authentication. You’ll now be able to use Gauth to authorize new applications that make use of two-step authentication by using the one-time passcodes it generates. Verification codes can also be sent via SMS to secondary numbers, or printed on a hard copy in case you lose your BlackBerry.
ENTER NEW PASSWORDS
Remember that part where we mentioned generating new passwords? At this point, you may have noticed that your BlackBerry has been nagging you for a new one for your Gmail account. Click on Manage Application-Specific Passwords from the 2-step authentication page, and scroll way down to the bottom.
There’s a section here for generating passwords. First, type in the name to go with the password (in this case, something like “BlackBerry”). Then you’ll be served up a fresh password which you can now plunk into the BlackBerry prompt - don’t worry about including space. Also, you’ll only need to enter this password once, so don’t worry about trying to remember it.
THAT'S IT!
While this method treats Gmail on BlackBerry as little more than another app with its own randomly-generated password, rather than leveraging the full two-step authentication method Gmail has to offer, it’s an added level of security that you wouldn’t otherwise have access to. At the very least, you can use third-party BlackBerry 10 apps to enable access to new Google-authenticated services on the fly.
I hope it supports using the camera for the barcode. The converted Android Google Authenticator app I tried on my PB doesn't. Speaking of that, hopefully the app you mention will be available for PB too (OS 2)
So we've been working on Authomator, to provide a much better experience with two-factor authentication. It's currently pending approval in BB World, and we're putting the final touches on some other aspects.
Here's a preview: http://dl.dropbox.com/u/50184433/Composition.png
Thanks for the post. This app was a ported html5 app and is open source. You can find the source at
https://github.com/badtoyz/html5-google-authenticator.git
It should be made clear that the step " Authenticate Mobile app", including the download of the app "Gauth" is completely optional and is probably not the best way for most users.
If you install a mobile authenticater on your device, such as GAuth, and authorize it as outline above, GMail will ONLY use this method of authenticating new logins to Gmail. That is, it will no longer use the SMS method. I realize that this is a personal preference but it is easier for me to type in a code that just automatically appeared in my hub via SMS as opposed to opening an app and generating a key.
Also, with the SMS method you can send to another backup voice line if needed in case you lose your phone.
If you later switch from the app method, such as Gauth, back to SMS method, Gmail resets all your authorized device passwords and forces you to re-authenticate again. Learned the hard way.
I can see many time where a local installed authentication app is the better way but the article makes it sound like it is the only way when it is not.
Just a correction to the post above, If you don't have your phone with GAuth with you (eg your SIM is in a different phone) - you can still have a code sent via SMS to the phone number set up, and if you have no phone with you, and you have printed out the one-time password list, you can use that to authenticate yourself.
ubermanx Feb 15, 2013 at 4:08 pm
The official Google Authenticator android app works as well if you sideload the converted BAR file.
biggerCC Feb 15, 2013 at 4:11 pm
A funny coincidence: I have just beta-tested a native Google Auth app for BB10 a friend of mine is currently building. Stay tuned!
DaedalusIcarusHelios Feb 15, 2013 at 4:36 pm
I hope it supports using the camera for the barcode. The converted Android Google Authenticator app I tried on my PB doesn't. Speaking of that, hopefully the app you mention will be available for PB too (OS 2)
HorizonXP Feb 15, 2013 at 4:38 pm
I don't know if he's referring to my app Authomator, but I can assure you that it does.
Founder of Pulsecode and taab
pick1eberry Feb 15, 2013 at 4:11 pm
use it all the time as everyone should!
HorizonXP Feb 15, 2013 at 5:12 pm
So we've been working on Authomator, to provide a much better experience with two-factor authentication. It's currently pending approval in BB World, and we're putting the final touches on some other aspects.
Here's a preview: http://dl.dropbox.com/u/50184433/Composition.png
Founder of Pulsecode and taab
joesworld Feb 15, 2013 at 7:10 pm
Looks amazing, can't wait until it's released.
Will it be free?
RezzaBuh Feb 16, 2013 at 4:03 am
Well, it means I have free weekend as I wanted to implement my own app. Is it native one? So Harmattan will be possible?
sk8er_tor Feb 15, 2013 at 5:27 pm
I'm transitioning to Outlook.com.
canuckvoip Feb 15, 2013 at 6:56 pm
I did as soon as I found out they were going to embed Skype inside the web page.
silverbullet Feb 15, 2013 at 9:07 pm
OK, so tell me how does Gauth actually work????
Do I need GAUTH or a program like this to have my BB get all of my messages after I get 2 step verification???
trueredsoxfan_58 Feb 15, 2013 at 9:45 pm
why did you post your gmail account to the whole world
badtoyz Feb 16, 2013 at 10:39 am
Thanks for the post. This app was a ported html5 app and is open source. You can find the source at
https://github.com/badtoyz/html5-google-authenticator.git
rdcanuck Feb 16, 2013 at 10:49 am
Greatly needed post...Thanks!
It should be made clear that the step " Authenticate Mobile app", including the download of the app "Gauth" is completely optional and is probably not the best way for most users.
If you install a mobile authenticater on your device, such as GAuth, and authorize it as outline above, GMail will ONLY use this method of authenticating new logins to Gmail. That is, it will no longer use the SMS method. I realize that this is a personal preference but it is easier for me to type in a code that just automatically appeared in my hub via SMS as opposed to opening an app and generating a key.
Also, with the SMS method you can send to another backup voice line if needed in case you lose your phone.
If you later switch from the app method, such as Gauth, back to SMS method, Gmail resets all your authorized device passwords and forces you to re-authenticate again. Learned the hard way.
I can see many time where a local installed authentication app is the better way but the article makes it sound like it is the only way when it is not.
aldaweb Apr 13, 2013 at 11:16 am
Just a correction to the post above, If you don't have your phone with GAuth with you (eg your SIM is in a different phone) - you can still have a code sent via SMS to the phone number set up, and if you have no phone with you, and you have printed out the one-time password list, you can use that to authenticate yourself.