4 ms·
OTOH it's much better if you're authorizing single operations. My bank in Poland has a scheme where it sends me a one time password together with some details
by robryk 10y ago
OTOH it's much better if you're authorizing single operations.
My bank in Poland has a scheme where it sends me a one time password together with some details on every mutating operation I do (e.g. on a transfer it sends the amount and account number of the target account).
- Nullabillity 10y agoAll banks in Sweden have a similar scheme. It sends a token and a description to your phone on any mutating or authenticating operation, you input your code, and it signs the token and sends it back to the bank.
- Natanael_L 10y agoThe BankID app? Most banks also have hardware TOTP tokens.
- Nullabillity 10y agoTrue, most banks have both. But the hardware tokens seem to be dying, slowly. Personally I consider the transaction description a pretty killer feature of Mobilt BankID compared to the hardware tokens.
- forgotpwtomain 10y agoThen you travel to a country where your mobile provider isn't working and all of a sudden you can't buy an airline ticket. SMS verification is also a terrible user experience.