Glossary · Second factors

Google Prompt (Google alerts): what it is

Google Prompt is the push alert asking you to approve or deny a sign-in with a single tap, instead of typing a code. It's the default method on many Android accounts, and the most fragile one without your phone.

What it is
Google's sign-in push
Since
2016
Verdict
Yes, but…

What it is

It's Google's specific version of push notification verification: when you try to sign in from somewhere new, Google sends an alert to your phone showing the device, the city and the time of the attempt. All you have to do is tap "Yes" or "No."

On Android it arrives without installing anything extra, since it's built into Google's own services. On iPhone, you need the Google app installed.

When it was introduced

Google launched it in June 2016 as an alternative to SMS codes within its two-step verification. In February 2017, it was improved to show real-time security information — where and when the attempt happened — making it easier to spot a sign-in that wasn't you.

Why it's used

It's used because Google offers it as the recommended method and, on Android, it has the least friction: no separate app to open, no code to copy.

The flip side is the same as any push notification: everything runs through that specific phone, with battery and a connection. If you lose it, or simply don't have it on hand, that alert never arrives, and without another method set up, you're stuck unable to complete the sign-in.

Should you use it?

Yes, but…

Yes, but with at least one other method that isn't your phone. Backup codes or a security key let you in even if the prompt never arrives.

Check this

Official sources: Google Prompt launch (Google, Jun. 2016) · Improved with security info (Google, Feb. 2017)