3 ms·
My bank has had MFA literally since the moment they first offered a web service. Hardware authenticators and everything. This was over a decade before any othe
by mtlmtlmtlmtl 3y ago
My bank has had MFA literally since the moment they first offered a web service. Hardware authenticators and everything.
This was over a decade before any other web service I know of even had optional MFA support.
- AlexandrB 3y agoMust be nice. The major Canadian banks only offered 2FA with SMS until recently and still don't support TOTP or hardware tokens, opting instead for some kind of proprietary flow through their phone app.
- px43 3y agoOkay, top three banks in the US.. Chase requires MFA, but still allows SMS, which can be broken easily with SIM swapping. BoA and Wells Fargo MFA can be completely disabled, which is how many people likely have their accounts set up. Until just a few years ago, mine would pop up an MFA prompt, but if you hit the "mobile website" button, it would just bypass it completely. I reported it to them for at least five years before it got fixed, and it's more likely that they just fixed it on accident.