I've written about the Wells Fargo issue before, here: https://news.ycombinator.com/item?id=15562850 https://news.ycombinator.com/item?id=15562850 You can rem

I've written about the Wells Fargo issue before, here: https://news.ycombinator.com/item?id=15562850 https://news.ycombinator.com/item?id=15562850 You can remove your phone number from your account to disable the security-defeating manner of how WF allows telephone 2FA to override the physical OTP 2FA. I am still baffled that Wells Fargos effectively eliminates any security benefit of the RSA-style OTP 2FA token devices by allowing telephone/SMS authentication as an alternative at login-time. It's like they don't understand security or they don't care.