5 ms·
Many of these services, I believe google is one, still require mobile phone as a fallback option.
by joewee 8y ago
Many of these services, I believe google is one, still require mobile phone as a fallback option.
- seppin 8y agoPaypal, an actual bank, still only allows SMS 2fa. It's stupid.
- Avamander 8y agoWrong. TOTP is supported, although hidden.
- jdeibele 8y agohttps://www.paypal-community.com/t5/Tips-from-Moderators/PayPal-Security-Key/m-p/433633#U433633 https://www.paypal-community.com/t5/Tips-from-Moderators/Pay... It uses Verisign's VIP app instead of Google Authenticator (or Authy or whatever).
- Avamander 8y agoYou can use any TOTP app.
- npunt 8y agoAccording to some threads I've read it doesn't work in all circumstances. Personally I wouldn't risk it since it could mean risking getting locked out of your account.
- Avamander 8y agoI've been using it for a few years now and I haven't encountered a place where I couldn't use it. It might force you to enter the TOTP code at the end of your password though, but it works.
- seppin 8y agoIt's not hidden, it's de facto disabled for 99% of users. Fix this, Paypal.
- rafaelm 8y agoAnd even this option is not available in all countries. I've almost stopped using Paypal completely because of this.
- nobodyshere 8y agoGoogle requires at least 2 ways of 2fa protection. You can enable a third one and disable the phone completely.
- jandrese 8y agoRequiring the phone number is mostly an anti-bot/spammer measure. Once they've seen your phone number you don't need to let them use it anymore.