Google 2 step verification

[Heliox]

I'm about to set up a 2 step verification for my Google account to secure my emails.
My question is Aqua-mail does not have a 2 step verification so it seems to me this is a gateway to my emails for any hacker to access them. Is this correct?

[Justin]

@Heliox
As far as I know AquaMail does not login into your Google account, but uses Oauth2 instead. Explained here e.g.:
http://www.bubblecode.net/en/2016/01/22/understanding-oauth2/

And see here, at "Gmail's new authentication, OAUTH2" :
https://www.mobisystems.com/aqua-mail/faq

@Kostya Would be useful to be able to link to specific questions

[Kostya Vasilyev]

Yes we use OAUTH2 and this is 1) more secure than passwords to begin with 2) supports two-factor.

It does not support "advanced multifactor" that only Gmail app supports (I'm not sure of the exact name, but it's not "just two factor" it's some yet another thing that Google has.... this is a limitation on Google's side).

Re: this is a gateway to my emails for any hacker to access them. Is this correct

Two factor or not, "any hacker to access them" is blatantly *not* correct.

Re: @Kostya Would be useful to be able to link to specific questions

Yeah, filed with web development team, hope they get to this sooner or later...