5 ms·
Can anyone recommend a US based bank (or a bank that accepts US customers) that 1) has either a 2FA token for phone e.g. with Google Authenticator, a hardware t
by yladiz 9y ago
Can anyone recommend a US based bank (or a bank that accepts US customers) that 1) has either a 2FA token for phone e.g. with Google Authenticator, a hardware token, or some kind of other token based factor; and 2) has strong security when calling? I generally don't need a physical presence.
My current two banks don't have direct 2FA enabled. As far as I remember, the questions available to one of my banks (credit union) are simple enough that you could probably find out by doing a public info search somewhere, and the other bank (Chase) has SMS 2fa, but outside of that it's just public database questions (I know this because I had my card number stolen recently, I currently don't have access to my phone as I'm out of the country, and they asked me a few different questions from a public database, like if I had ever lived at ABC Dr., do you know this person, and what is the full name, etc.). I'd much rather be able to give the banks some kind of information that they are required to verify before they can access my account, like a verbal passphrase, but I don't think that's possible (as in, I wouldn't be able to access my account over the phone without the passphrase).
- mackncheesiest 9y agoI know that USAA offers TOTP 2FA. Not sure about calling though.
- yladiz 9y agoSadly, USAA is only open to military service members and their kids. That would be my choice if I could use it.
- sowbug 9y agoNot true. They offer insurance only to military families. Banking is open to anyone. EDIT: This is no longer true as of 2013.
- yladiz 9y agoAre you sure? At the link listed below, it seems that it's only available for military. https://www.usaa.com/join/start/?productId=bank-checking-classic https://www.usaa.com/join/start/?productId=bank-checking-cla...
- sowbug 9y agoYou are right and I was wrong. They changed the rules in 2013: https://communities.usaa.com/t5/Other/USAA-Changes-Membership-Eligibility/td-p/26786 https://communities.usaa.com/t5/Other/USAA-Changes-Membershi... They've grandfathered in existing members who wouldn't qualify today.
- deleted 9y ago[deleted]
- 7hertz 9y agoYou USED to be correct. I'm not military and I have a USAA bank account. For a couple/few years they opened accounts to civilians, but then reversed that decision about a year or so ago. Now bank accounts are only offered to military again.
- deleted 9y ago[deleted]
- daxorid 9y agoYes, but it's this janky Symantec-only implementation. AFAIK I'm unable to use a generic TOTP authenticator like Duo or GA.
- dublinben 9y agoThere are a handful of smaller banks or credit unions listed as accepting proper 2FA here. [0] I have no experience with any of them. [0]https://twofactorauth.org/#banking https://twofactorauth.org/#banking
- dx034 9y agoAlthough the list is a bit misleading. German banks are all listed without 2FA whereas in reality they all use some form of a TAN (transaction number). Not as safe as a hardware token but if you keep it safe, it's as secure as a hardware token. And most Sparkasse branches will use actual hardware tokens. So the reality is not as bad as the list suggests.
- germanier 9y agoThe problem seems to be that no German bank I know of support 2FA for login purposes which is what that list tracks[0] (although they don't state that clearly – it took me a few minutes to track that down) But listing "Sparkasse" as one German bank is misleading as there are 400 independent banks sharing that brand with different policies. They use at least a few different backends for their online system although there seemed to have been some consolidation in recent years. [0]: https://github.com/2factorauth/twofactorauth/blob/master/CONTRIBUTING.md#a-note-on-definitions https://github.com/2factorauth/twofactorauth/blob/master/CON...
- callmeal 9y agoChase has 2FA with a token. See: https://www.jpmorgan.com/tss/General/Improved_Security_and_151_A_Token_of_Appreciation_for_Your_/1114735454829 https://www.jpmorgan.com/tss/General/Improved_Security_and_1...
- yladiz 9y agoIs that for Chase, or J.P. Morgan? My understanding is that Chase doesn't offer a 2FA besides SMS and when I go into my account settings I don't see anything that lets me enable 2FA.
- superdaniel 9y agoSame.
- _virtu 9y agoRegarding your security questions: you don't have to put the real answers in. Instead I often create 30 char passwords for those fields.
- jelkins 9y agoThey don't advertise this, but schwab offers 2fa with either a hardware token that they will ship you OR a 2FA token on your phone using https://m.vip.symantec.com/ https://m.vip.symantec.com/ . You have to call them up, but their customer service is pretty good.