3 ms·
It is used as the "username" for all those things, not as the "password". That's the major difference. To login to secure services like all government services
by kristofferR 9y ago
It is used as the "username" for all those things, not as the "password". That's the major difference.
To login to secure services like all government services, our banks, our digital post box etc we mostly use BankID.
With BankID you enter your SSN, your personal password and a code from your 2FA key fob/phone app.
https://www.bankid.no/en/ https://www.bankid.no/en/
- JSONwebtoken 9y agoSo what's stopping anyone from downloading the phone app and getting your BankID and 2FA code? Is there a verification process to be able to use the app?
- kristofferR 9y agoAh sorry, "phone app" was slightly misleading. It's a special kind of phone app that's saved on the SIM card. https://en.wikipedia.org/wiki/SIM_Application_Toolkit https://en.wikipedia.org/wiki/SIM_Application_Toolkit
- snaily 9y agoThere is a verification process: Only institutions capable of doing proper KYC can hand out BankIDs.
- kwhitefoot 9y agoFor those, like me, who don't know what KYC is: https://en.wikipedia.org/wiki/Know_your_customer https://en.wikipedia.org/wiki/Know_your_customer. I wonder if I or, more likely, someone else could write a GreaseMonkey script that would turn all these obscure abbreviations into explanatory tooltips.
- kwhitefoot 9y agoThey would also need your personal password. And the first time you use it you will need the one time pad your bank has provided you with.