|
|
Post by chris on Jul 14, 2018 19:36:56 GMT
If you choose to opt out of 2FA (as I certainly will) , does the system "remember" this for your next logon, or do you have to opt out of 2FA every time you log in ? I do hope not. Yes it will remember.
|
|
lara
Posts: 345
Likes: 300
|
Post by lara on Jul 14, 2018 20:31:58 GMT
I'm not sure I like an opt out with warnings. It means if anyone did hack my account, I'd be even less protected legally because I didn't follow their advice and use 2fa all the time. They should do what the banks do and allow a read-only login with 2fa only required for new bank details set up etc. It seems they won't do this because it is more expensive to implement than a simple opt-out. If you opt-out it will only be for logins. If someone opts out, will there be an option to opt back in?
|
|
|
|
Post by chris on Jul 14, 2018 20:51:05 GMT
If you opt-out it will only be for logins. If someone opts out, will there be an option to opt back in? Yup
|
|
michaelc
Member of DD Central
Say No To T.D.S.
Posts: 5,715 
Likes: 2,986
|
Post by michaelc on Jul 14, 2018 21:02:54 GMT
I'm not sure I like an opt out with warnings. It means if anyone did hack my account, I'd be even less protected legally because I didn't follow their advice and use 2fa all the time. They should do what the banks do and allow a read-only login with 2fa only required for new bank details set up etc. It seems they won't do this because it is more expensive to implement than a simple opt-out. If you opt-out it will only be for logins. For all withdrawals, changing personal information, selling loan units at a discount, etc. you'll still need to use 2FA. That's excellent news! Thanks Chris.
|
|
|
|
Post by westcountryfunder on Jul 15, 2018 14:40:05 GMT
If you opt-out it will only be for logins. For all withdrawals, changing personal information, selling loan units at a discount, etc. you'll still need to use 2FA. That's excellent news! Thanks Chris. Not sure about excellent news, but certainly an improvement. But I don't get it. As I understand the present system, withdrawals are only permitted to an account from which a previous deposit has been made. There are three possibilities for my main AC account. I would have no strong objection to limiting this to one specified account (although it would be inconvenient at times), and I gather this is what AC intends to do. So for a withdrawal under the new system why is the sms rigmarole necessary?
|
|
trium
Member of DD Central
Posts: 384
Likes: 304
|
Post by trium on Jul 17, 2018 15:04:46 GMT
This thread has me baffled. I have no email on this subject, my log-in screen looks and behaves exactly as it always did and I struggle to understand what you guys are talking about. We seem to be on different planets. But if it is true that I am about to be forced, for my own good, to accept some convoluted log-in process to get into an account which already is the most tedious of all my accounts (full typing of full email address, security question, logged out every time I read a valuation report) I will not be happy.
Edit - my spam filters binned the email (it came from invest@ rather than enquiries@) so I've only just read it. I'll try not to prejudge but every instinct I have tells me that I'm going to strongly dislike this "improvement".
|
|
nush
Member of DD Central
Posts: 396
Likes: 113
|
Post by nush on Jul 17, 2018 15:27:41 GMT
really really not an improvement.
|
|
romy
Member of DD Central
Posts: 78 
Likes: 41
|
Post by romy on Jul 17, 2018 15:48:58 GMT
I do wish I didn't keep reading 2FA as 2 finger authorisation !   That said I do approve of increasing security, usually after one's done it a few times it's not too bad, though confess haven't tried it yet... R |
|
empirica
Member of DD Central
Posts: 326
Likes: 235
|
Post by empirica on Jul 17, 2018 20:45:24 GMT
I do wish I didn't keep reading 2FA as 2 finger authorisation ! But that's the only way I know how to type! 
|
|
Mick
Be nice... People respond.
Posts: 138
Likes: 93
|
Post by Mick on Jul 17, 2018 22:06:43 GMT
Good grief... Is this the best that can be come up with. I use my fingerprint to log into my Bank, its quick & Easy. This is a pain.
|
|
|
|
Post by chris on Jul 18, 2018 5:32:45 GMT
Good grief... Is this the best that can be come up with. I use my fingerprint to log into my Bank, its quick & Easy. This is a pain. If you install the Authy app then once we've released the next 2FA update you can receive a notification on your phone when you try to log on that you can authorise with your fingerprint, which will then log you in on the website.
|
|
travolta
Member of DD Central
Posts: 1,506
Likes: 1,214
|
Post by travolta on Jul 18, 2018 8:14:48 GMT
Good grief... Is this the best that can be come up with. I use my fingerprint to log into my Bank, its quick & Easy. This is a pain. If you install the Authy app then once we've released the next 2FA update you can receive a notification on your phone when you try to log on that you can authorise with your fingerprint, which will then log you in on the website. Seriously Chris, I'm walking away with my not inconsiderable investment . Time to realise that many of us don't embrace your layers of tech twaddle and will p*** off to easy street with our fat funds. The future is not smart.
|
|
p2pete
Member of DD Central
Posts: 144
Likes: 142
|
Post by p2pete on Jul 18, 2018 8:29:36 GMT
It's not mandatory yet so just don't use 2FA until they've made the improvements.
|
|
|
|
Post by chris on Jul 18, 2018 8:31:35 GMT
travolta - I make no apologies for trying to keep your funds secure. If we lose your business then that's a shame but my priority is the protection of all lender funds. We've made a concession after the discussion on this forum to allow logins to the platform without requiring 2FA (unless you log in from a new device or block cookies). That should make most day to day interaction less onerous than now whilst maintaining suitable security on the higher risk operations such as selling loans at a discount or making a withdrawal. The other pending change is to enable push authorisation, which allows the app or browser plugin to send the PIN to our servers instead the lender having to type it in again in an effort to make it a less onerous process. As I say it would be a shame to lose your business over proactive moves to keep your money safe and secure but that is your choice. We carefully monitor conversion rates and lender engagement and thankfully last week was a record week for retail deposits with the website conversion rate holding steady so the indicators are the wider lender base do not share your sentiment or even approve of our efforts.
|
|
kmac
Member of DD Central
Posts: 73
Likes: 73
|
Post by kmac on Jul 18, 2018 8:53:57 GMT
If you install the Authy app then once we've released the next 2FA update you can receive a notification on your phone when you try to log on that you can authorise with your fingerprint, which will then log you in on the website. Seriously Chris, I'm walking away with my not inconsiderable investment . Time to realise that many of us don't embrace your layers of tech twaddle and will piss off to easy street with our fat funds. The future is not smart.
I am leaving too. This 2PA nonsense to log in is the last straw.
|
|
