2FA authorization

mro

johnsmith1890 wrote: »

First Direct are forcing this on their customers. Whilst more enlightened banks such as BOS have a system whereby you can authenticate (trust) your hardware device, FD are back in the Stone Age with a separate device needed to even log on.

This is same with HSBC, parent of FD.

Very annoying having to use Secure Key, when you just want to check balance or make payment that has been setup before with the device.

It removes the flexibility when I don't have the device, unless I use mobile phone app, but my mobile is old, so I would have to change that.
.

mro

JuicyJesus wrote: »

Indeed, pure coincidence - also a pain in the 'arris. Nationwide texts you a code, whereas Lloyds doesn't ask for anything to log me on curiously!

I think all banks had to increase security due to Eu.


HSBC started this months ago, having to use secondary device (Secure Key or mobile app) to login every time.

First Direct (part of HSBC) has recently sent letter saying it will do the same soon.


Surpsrised Lloyds hasn't done anything yet, unless they have been waiting & can now ignore due to Brexit.
.

mt99

FD/HSBC are definately the most secure bank - you won't get into your account unless you use the security gizmo thing, and that is tied to your account so you won't be able to use anyone elses either.

Reset of internet banking logon credentials requires phone call (voice ID) and lots of questions.

This comes at the expense of convenience of course - as always.

Lloyds athe least secure, but fantastically convenient. OTP by text, and use debit card to reset forgotten details

colsten

mro wrote: »

I think all banks had to increase security due to Eu.

No, it's being done to combat increasing fraud. Even the likes of GMAIL and Amazon, who are not subject to the Payment Services Directive / the resultant UK Law, provide 2FA.

That aside, each and every banking app that I use makes it easier to log in, and to make transactions once logged in, than it used to be in the past.

jamesd

masonic wrote: »

Coop Bank has sent me a text message to check I made a transaction and wants me to send them a text back to confirm.

This could be:

1. triggered by something other than just that one transaction, causing them to want extra confirmation after the developments. Could be some slow extra security method.

2. to try to verify that a transaction wasn't carried out by someone who temporarily had the phone at the time of the transaction.

On occasion I've had similar from one or two other places.

Uxb1

colsten wrote: »

No, it's being done to combat increasing fraud. Even the likes of GMAIL and Amazon, who are not subject to the Payment Services Directive / the resultant UK Law, provide 2FA.

Apparently in 2018 a Google engineer revealed that over 90% of all Gmail users did not give a rat's !!! about it and were not using 2FA. I somehow doubt that Amazon would ever reveal their % of 2FA users

18cc

Gmail and Outlook 2FA are particularly easy to use in that any logon to the email account results in a 'is this you' prompt on your smartphone (unless you have previously trusted the device) which you simply click to authorise the logon.

You need the authenticator app on your phone.