Moneybox 2FA

andy90210

Hi

Apologies if this has been asked before but given the large sums people are depositing in the Moneybox LISA, I wanted to verify how secure the account is. I was surprised that they seem to allow people to reset the password using an email and then verify a new device with the same email address. That means if someone were to get access to my email, they could reset my password and log in on a new device. That doesn’t sound like 2 factor authentication to me. Any thoughts on this ?

Regards
Andy

Miser1964

It's one of the weakest forms of 2FA, for exactly the reason you set out. 

cerebus

Have you got 2FA set up on your email account , that will make it more secure 

andy90210

I would hope that they don’t rely on clients having 2FA on email accounts. Really they should use a text to a mobile or use an Authenticator app whenever a new device is added given the levels of investment here. 

cerebus

Agreed , all you can do is vote with your feet and tell them why