Trading 212 2FA

Northern_Wanderer

No I haven't set up any authenticator app. Trading 212's help pages are a load of tosh as they say you can use a "trusted device" without an auth app which seems to be incorrect.

Most places will send you a text code for 2FA, or an email, and really don't see why I should have to use an authenticator app on a web platform. Sure, I thought it was weird that I could log in with just an email and password so am fine with extra security, just not extra apps on my phone. I wouldn't where to start with a web based auth plug in and Trading 212 have no reference to them. My stance on financial security is to keep money apps off my phone other than my current account. I'm very uncomortable with this set up if something happens to my phone. There is no customer service number and they will have £000's of mine that I can't access.

I will transfer to a different provider. Annoyingly I have just given up an ISA that is now more attractive than other deals available at present. Don't let the high interest rate at Trading 212 con you!

Slippery slope to having to have a smart phone to participate in life. I think I will search for my cave now!

I was really asking if anyone had been able to use the web platform without an extra app.

masonic

As others have suggested, there is no requirement to have a smartphone or tablet to use time-based 2FA. Browser extension and installable PC implementations exist. If you have a device that can load the T212 website, then it should be able to fulfil your 2FA needs too. Unlike SMS, which requires a mobile phone or other SIM carrying device.

Northern_Wanderer

Thanks, I don't know anything about auth apps in firefox and clearly neither do T212 or they might suggest some...very wary of add ons for security reasons.

AmityNeon

Northern_Wanderer said:

Thanks, I don't know anything about auth apps in firefox and clearly neither do T212 or they might suggest some...very wary of add ons for security reasons.

You don't have to install browser addons/extensions either. A very well-known offline password manager can be used solely for 2FA (where everything is stored locally and can be run without an internet connection). 

KeePassXC
Getting Started
Adding TOTP

masonic

Northern_Wanderer said:

Thanks, I don't know anything about auth apps in firefox and clearly neither do T212 or they might suggest some...very wary of add ons for security reasons.

Agreed, browser add-on would be the option of last resort, security wise. KeepassXC as suggested above or similar are good options on a well secured PC that isn't used for risky activities.

booneruk

Northern_Wanderer said:

Most places will send you a text code for 2FA, or an email, and really don't see why I should have to use an authenticator app on a web platform

I'm not sure how having to have a mobile to receive a text and having a mobile that you use for MFA authentication is any different.

2FA, Or MFA (Multifactor) is all about authenticating with something you know (pin/password), something you own (mobile device/those little card reader devices for ye olde bank logins), and often something you are (fingerprint/face/retina etc). 

Having a phone handle MFA codes via app behind a fingerprint or face unlock is doing security properly.

Apps you download from the Apple or Google store are vetted. Google themselves offer an authenticator app. All the authenticator apps do is generate a code based on a number scanned from QR code and the current time.

Even if someone had your phone + authenticator app, they'd still need to have your fingerprint as well as your email address and password.

I'm not trying to be patronising, but if you want to read up more on multifactor apps and how the codes they generate work, there's a good article here: https://www.keepersecurity.com/blog/2023/07/20/what-are-authenticator-apps-and-how-do-they-work/

Northern_Wanderer

booneruk said:

Northern_Wanderer said:

Most places will send you a text code for 2FA, or an email, and really don't see why I should have to use an authenticator app on a web platform

I'm not sure how having to have a mobile to receive a text and having a mobile that you use for MFA authentication is any different.

Well, it's just a code that I get via text and can type in somewhere, which is acceptable. It's not an app that is collecting my data for who knows what reasons....I disagree that these apps are just generating a code.

Northern_Wanderer

AmityNeon said:

Northern_Wanderer said:

Thanks, I don't know anything about auth apps in firefox and clearly neither do T212 or they might suggest some...very wary of add ons for security reasons.

You don't have to install browser addons/extensions either. A very well-known offline password manager can be used solely for 2FA (where everything is stored locally and can be run without an internet connection). 

KeePassXC
Getting Started
Adding TOTP

Thank you, I will check this out.

Aidanmc

Northern_Wanderer said:

No I haven't set up any authenticator app. Trading 212's help pages are a load of tosh as they say you can use a "trusted device" without an auth app which seems to be incorrect.

Most places will send you a text code for 2FA, or an email, and really don't see why I should have to use an authenticator app on a web platform. Sure, I thought it was weird that I could log in with just an email and password so am fine with extra security, just not extra apps on my phone. I wouldn't where to start with a web based auth plug in and Trading 212 have no reference to them. My stance on financial security is to keep money apps off my phone other than my current account. I'm very uncomortable with this set up if something happens to my phone. There is no customer service number and they will have £000's of mine that I can't access.

I will transfer to a different provider. Annoyingly I have just given up an ISA that is now more attractive than other deals available at present. Don't let the high interest rate at Trading 212 con you!

Slippery slope to having to have a smart phone to participate in life. I think I will search for my cave now!

I was really asking if anyone had been able to use the web platform without an extra app.

I'm in a similar position.

I dont have or use smartphone/tablets/etc so i cant have any authenticator apps.

Contacted 212 to see if they have a solution, they were useless. I made a complaint as i cant make a withdrawal if i needed to. I should have a final response to the complaint at the end of September.

As you say, its possible to transfer out the S&S ISA and Cash ISA if i need to.

But i have some funds in Invest account too, only a couple of hundred pounds which i cant access anyway until April 25 ( bonus cash for funding S&S Isa)

AmityNeon

Aidanmc said:

I dont have or use smartphone/tablets/etc so i cant have any authenticator apps.
Contacted 212 to see if they have a solution, they were useless. I made a complaint as i cant make a withdrawal if i needed to. I should have a final response to the complaint at the end of September.

As previously mentioned, authenticators aren't limited to phone and tablet devices so you can make a withdrawal if necessary; however, I absolutely agree that Trading 212 should provide full support to customers who choose not to use such devices. Not allowing OTP via SMS or email? That's great from a security perspective, but it's not an approach they can just rapidly shoehorn in without adequate provisions in place for existing customers.