3 ms·
Not any more: - Login authentication requires the phone, even for the web app. - Card payments require the phone to approve them. Two of my banks require the
by jlokier 5y ago
Not any more:
- Login authentication requires the phone, even for the web app.
- Card payments require the phone to approve them.
Two of my banks require the phone during the authentication step to login their web apps. Both of them are business accounts.
Recently I had a real problem because my phone screen stopped working (blank screen) though everything else worked. Unfortunately, remote desktop (TeamViewer) works great except for banking apps, where for security reasons it can't grab the screen to relay it. So I phoned one of the banks, and they said there was nothing they could do to authorise access to my account, except get another working phone, which they could then transfer authorisation to.
I had to purchase another phone, then talk with the bank to authorise it, before I could login to the bank account using my laptop to make a payment.
As for card transactions, probably half of my card accounts occasionally bring up a notification on my phone asking me to approve a transaction. So online shopping isn't possible without the phone nearby.
- EdwardDiego 5y agoI get the needing the phone, but is it solely via their app, no option for SMS? If so, I'm surprised and disappointed, and see why you're finding it a damn hassle.
- browningstreet 5y agoFWIW I do tech at a bank and while I can’t speak to the absolute need for a phone for authorizations, I can say that the blessed platforms are required because the device profiling for transactions is implemented for fraud detection and prevention. Non-standard OSes can’t be trusted, or IDed for trust. Fraud identification and prevention is the driving force for this requirement.
- aaaaaaaaata 5y agoSo...my 24 character password and MFA key isn't enough? Thanks for putting a human face on the issue, but this is a pretty bad reason to lock people into Google/Apple official software. If someone can compromise your server with a malformed client, someone isn't doing their job, and that's all this really protects against. Now, if you said you wanted these records to help put together clues after you or a customer was compromised, that could make sense too. Anyway.
- deleted 5y ago[deleted]