Assetz Capital Login problem

DavidT67

Is anyone else having problems with accessing Assetz Capital portal this morning?
There two factor authentication was working for me fine yesterday, but this morning states 'Code invalid' for every code received.
There customer representative states that their system shows me successfully logging in despite being unable to get past the code verification page!
Issue now passed to their internal IT, no telephone option for dealing...

DavidT67

Hmm, seems like codes are taking longer to arrive than the timeout to use the code...

taylornj

I logged in this morning no problems. Took slightly longer for code to arrive, not my much.

DavidT67

Basically first couple of attempts code didn't arrive at all, from then on whenever I asked for a code I received the one before last, (bit like the two ronnies mastermind sketch). Don't know whether delays were with sending service or delivery service.

Fortunately Assetz Capital has now seen some sense and won't know insist on 2FA for every login from a known device and location.

masonic

There are plenty of reasons why SMS-based 2FA is deeply flawed and should not be used. Lack of reliability of text messaging is just one drawback. People really ought to be using authenticator apps if they are able.

While it's disappointing AC opted for the proprietary Authy app rather than the open standard used by Google, HMRC, Microsoft et al., it's still a great deal better than receiving SMS codes.

keyboardworrier

RateSetter have an optional extra security measure whereby they text you a one off permanent code to use, something like that would have been much better.

masonic

keyboardworrier wrote: »

RateSetter have an optional extra security measure whereby they text you a one off permanent code to use, something like that would have been much better.

Yes, that's the one I find worst of all. As it is the same each time (like your password), why not just make your password a little longer? In fact, you could change your password to append that code to it, then turn the feature off for a quicker login that doesn't involve entering your password twice.