4 ms·
Off topic, but it’s so frustrating how yubikey (or any non SMS/email 2FA as a matter of fact) is not supported for any bank. I think I would sign up right away
by syntaxing 5y ago
Off topic, but it’s so frustrating how yubikey (or any non SMS/email 2FA as a matter of fact) is not supported for any bank. I think I would sign up right away to a bank that supports yubikey or authenticator apps.
- ssklash 5y agoSame. I don't know of a single US-based bank that supports it.
- Redori 5y agoCharles Schwab supports it
- syntaxing 5y agoCan you bypass it with SMS? Or can you permanently disable SMS 2FA?
- enra 5y agoI don't think you can bypass it with SMS so if you get locked out you need to call them. Not sure how easy it is to bypass by calling them. But Schwab doesn't support hardware keys. Morgan Stanley is the only bank/financial company I know supports hardware keys.
- dyingkneepad 5y agoWhen they finally support it, I guess they will add the convenient option to say you don't have your yubikey with you at the moment and then an SMS will be sent instead.
- syntaxing 5y agoYou just described Vanguard. What’s the point of yubikey support when you can bypass it with SMS….
- psanford 5y agoThe yubikey still protects you from phishing campaigns, even if you have other 2fa modes enabled on an account.
- bilalq 5y agoBank of America supports it and like you'd expect, supports bypassing via SMS. Even worse is that they only let you register a single key.
- Spivak 5y agoI can’t really blame them when the alternative is dealing with very angry customers who suddenly can’t access their money.
- arianvanp 5y agoMy bank recently started supporting it: https://www.online-zahlen-mit-fido.de/ https://www.online-zahlen-mit-fido.de/
- rpadovani 5y agoWow, that's a bad website UX. "Pay online with FIDO", no links back to Sparkasse website. It screams "Phishing" miles away. And it isn't linked from here: https://www.sparkasse.de/service/sicherheit-im-internet/ihre-daten-bei-der-sparkasse.html https://www.sparkasse.de/service/sicherheit-im-internet/ihre... At least it is mentioned here: https://www.foerde-sparkasse.de/de/home/service/fido-token-mastercard.html?n=true https://www.foerde-sparkasse.de/de/home/service/fido-token-m... However, this is a website I'd say my mother to not go to
- alligatorplum 5y agoI recently was looking to add my yubikey to one of my banks (BofA) and I could not for the love of god figure out how to add one. I know BofA supports it because there are many articles about adding it, but I couldn't find a way of doing it from their website. The best I could do from there was SMS 2FA. I finally found a link from just googling around that took me directly to a page where you could add a security key. But the catch was that I had to have an active session if I wanted to add a key. If you weren't already logged in in another tab, it will redirect you to the BofA dashboard after you log in. From all the time I spent, there is no way to get to that page from the BofA web dashboard. Very frustrating and annoying experience. But atleast it is out of the way now. FYI you can only have a max of 2 yubikeys.
- staticassertion 5y agoHave you asked them to? I've sent support requests to every vendor that doesn't support U2F with the hope that if others do the same it may get bumped up.