Two factor authentication AKA pain in the arse login process

Indeed its not as good a system as the HMRC system that just says the digits.

Every time I log on without having to go through that is a blessing now.

I still find it to be a pita. About 50% of the time the "Opt-out" does not work - seems to be totally random as to when this happens - and when the code is needed it is often taking several minutes (or longer) to receive the code and then (because I have used the resend function) I get 2 or 3 codes and even worse sometimes when I input the code I get the "invalid" message. It really is poor, especially as I run three accounts and log in several times per day. This is becoming less as I am becoming less active on the accounts as it becomes more painful.

Every time you log in to a different account you overwrite the cookie that stops you having to use 2FA to log in, so next time you switch to a different account again you need to log in again.  We're working on some longer term changes to better facilitate multiple user accounts like this but in the mean time you could use different Google Chrome user accounts for each login.  This would allow you to switch between multiple cookies on the site, one for each user account, to consistently opt-out of 2FA across all of them.  Select the right chrome user account, log in to the site using that correct email and password, no more 2FA until the cookie expires.

Sorry, company security policy is that 2FA has to be opt-out.

Hi chris. Any updates on the designated bank accounts please? I really don't want this to slip by!

Designated bank accounts do not really affect the security of our system.  We already track where past withdrawals have been sent and perform additional security checks and validation on requests for withdrawals to new bank accounts.  Even with a designated bank account system you need a process in place to change that bank account or manage a list of accounts, so you still need to be able to trust the identity of the person logged in to the system - something 2FA contributes to.  As you may have seen in recent press articles there's a strong push towards 2FA adoption across the financial sector with banks increasing its use and proposing using it for every online transaction in the future - i.e. want to buy something on Amazon, have to use 2FA with the bank to do so.  I expect the rest of the P2P sector to follow our lead in due course.

All that said designated bank accounts are a convenience feature for lenders and are near the top of our list of priorities.  They'll likely be built within the next couple of development sprints.

I can't I'm afraid as I'm not in control of the timing.  We've moved to a sprint system with prioritisation set by the various stakeholders within the business.  They agree what the commercial priorities are prior to each two week development sprint and then agree with the developers which jobs will be tackled during the next sprint balancing development time against the relative priorities.  I have a voice on that panel but do not dominate it.

Designated bank accounts are near the top of the priority list but didn't make it into the current sprint.  They'll be reviewed again for the next sprint in a week's time where they may or may not make the cut depending on the commercial pressures at that point in time.