3 ms·

But 2FA is moot if it’s the same device as your bank app, is it not?

• rightbyte 8mo ago
  Yes. Please tell my bank that.
  • LtWorf 8mo ago
    They know. The EU directive is quite clear that hw tokens are to be preferred over phones. Banks are cheap though and violate it.
  • cuu508 8mo ago
    Switch bank.
• clhodapp 8mo ago
  It is in the specific case that you don't have biometric or PIN login set up on the device and you use a password manager that doesn't require authentication. In that case, the only factor is "something you have". Otherwise, it is still a multi-factor authentication because the device itself still represents "something you have", and your device unlock represents "something you know" or "something you are".
• naniwaduni 8mo ago
  Nearly all the security value of 1fa is that it keeps your users from picking the own passwords.