3 ms·

Just as a PSA, it wasn't until I looked at one of these articles in the last few days about PayPal that a screenshot showing how to enable 2FA demonstrated that

Just as a PSA, it wasn't until I looked at one of these articles in the last few days about PayPal that a screenshot showing how to enable 2FA demonstrated that TOTP-based authenticator apps are now allowed. For the longest time, PayPal was only allowing 2FA SMS after they chucked their old physical security keys. Anyone who's been stuck on SMS may wish to login and switch over to TOTP.

lxgr 7y ago
I tried when they introduced that and gave up on it again: There is no way to mark a device as trusted, and I'm certainly not opening my 2FA app for every single login/payment. Also, this is 2020, where is WebAuthN? That would at least make the constant 2FA a bit more bearable.
- whatsmyusername 7y ago
  > I'm certainly not opening my 2FA app for every single login/payment. I'm fine with this. I'd rather take the 3 seconds it takes to open Authy than the several days it takes to clean up the mess.
- floatingatoll 7y ago
  How many times per year do you pay someone with PayPal?
  - smileybarry 7y ago
    Every single login asks for TOTP, and sessions expire very quickly. Even the mobile app asks every time, even if you use some saved/authorized login method like fingerprint login. For someone who uses PayPal for most online payments this can be extremely tedious.
    - floatingatoll 7y ago
      None of this is relevant to the question asked. I understand it’s all correct, but it fails to answer the question of quantity over time presented.
      - smileybarry 7y ago
        In my previous comment: > For someone who uses PayPal for most online payments this can be extremely tedious. To rephrase that: the quantity can range from "almost every online payment" to "every online payment". If, like many people, you try to use PayPal for most payments to avoid credit card info leakage, that means you need to answer a TOTP challenge on every payment.
- ornornor 7y ago
  Bitwarden and probably other password managers will put the OTP in your clipboard after filling your credentials in so you don’t have to open anything to get the TOTP.

lxgr 7y ago

I tried when they introduced that and gave up on it again: There is no way to mark a device as trusted, and I'm certainly not opening my 2FA app for every single login/payment. Also, this is 2020, where is WebAuthN? That would at least make the constant 2FA a bit more bearable.

whatsmyusername 7y ago
> I'm certainly not opening my 2FA app for every single login/payment. I'm fine with this. I'd rather take the 3 seconds it takes to open Authy than the several days it takes to clean up the mess.
floatingatoll 7y ago
How many times per year do you pay someone with PayPal?
- smileybarry 7y ago
  Every single login asks for TOTP, and sessions expire very quickly. Even the mobile app asks every time, even if you use some saved/authorized login method like fingerprint login. For someone who uses PayPal for most online payments this can be extremely tedious.
  - floatingatoll 7y ago
    None of this is relevant to the question asked. I understand it’s all correct, but it fails to answer the question of quantity over time presented.
    - smileybarry 7y ago
      In my previous comment: > For someone who uses PayPal for most online payments this can be extremely tedious. To rephrase that: the quantity can range from "almost every online payment" to "every online payment". If, like many people, you try to use PayPal for most payments to avoid credit card info leakage, that means you need to answer a TOTP challenge on every payment.
ornornor 7y ago
Bitwarden and probably other password managers will put the OTP in your clipboard after filling your credentials in so you don’t have to open anything to get the TOTP.