AmEx and 4 form factor authentication

DullGreyGuy

AmEx are really starting to go OTT on logging in on their website...

1) Enter Username and Password for 1FA
2) Told to authenticate in app for 2FA
3) FaceID for 3FA
4) Have to have a text to complete app log in 4FA

No idea why they've gone from text authentication to app when you still need a text to get into the app! Really discourages use

MattMattMattUK

Something to do with your device or IP?

If I log on in app it is done through biometrics, if I log on via a browser I have used before and verified then it is fine, if I log on in a private window it requires me to either authenticate in app or use a code, not both. 

Where is step three coming from, is that to log into the app? 

DullGreyGuy

MattMattMattUK said:

Something to do with your device or IP?

If I log on in app it is done through biometrics, if I log on via a browser I have used before and verified then it is fine, if I log on in a private window it requires me to either authenticate in app or use a code, not both. 

Where is step three coming from, is that to log into the app? 

to log into the app it always requires both FaceID and text message

MattMattMattUK

DullGreyGuy said:

MattMattMattUK said:

Something to do with your device or IP?

If I log on in app it is done through biometrics, if I log on via a browser I have used before and verified then it is fine, if I log on in a private window it requires me to either authenticate in app or use a code, not both. 

Where is step three coming from, is that to log into the app? 

to log into the app it always requires both FaceID and text message

In the app, on the Account tab, then about half way down Settings and Two-Step Verification, is "Remember This Device" ticked?

DullGreyGuy

its a slider and its turned on.