Mike
Member of DD Central
Posts: 651
Likes: 446
|
Post by Mike on Jul 10, 2018 8:53:12 GMT
6 pages of moaning in less than a day. That's faster than lendy
|
|
|
|
Post by chris on Jul 10, 2018 9:01:40 GMT
Yes great , but being a rural straw sucking hill Billie type i have no reliable mobile phone coverage within a 10 minute drive, 20min 😰 round trip , so how am going to log in. been here before with Tesco banking had to shut the account in the end just could not drive fast enough before the stupid code time lapsed. and I'm thinking of closing my AC account because of this latest introduction. Over the top in my opinion - once set up Authy works offline with no internet connection, you just open the app, select the site / service you wish to authenticate, and type in the code that is shown in your web browser. Push notifications work over the internet without requiring a mobile phone signal. You can also opt to use your landline as 2FA.
|
|
lara
Posts: 345
Likes: 300
|
Post by lara on Jul 10, 2018 9:10:33 GMT
and I'm thinking of closing my AC account because of this latest introduction. Over the top in my opinion - once set up Authy works offline with no internet connection, you just open the app, select the site / service you wish to authenticate, and type in the code that is shown in your web browser. Push notifications work over the internet without requiring a mobile phone signal. You can also opt to use your landline as 2FA. I'm not at all keen on using third party apps but having the landline ring every time I want to log in is just not practical in a home occupied by more than one person. Someone said you need a mobile phone to do the initial set up with Authy, is this the case please or can someone without a mobile use Authy?
|
|
mary
Member of DD Central
Posts: 698 
Likes: 711
|
Post by mary on Jul 10, 2018 9:13:14 GMT
The service is Authy, and we pay them per login. That is how they commercialise the relationship. The open source solutions are not as complete nor easy to integrate with as Authy, and we are paying for that simplicity. Therefore the business case to reduce 2FA to only be required for withdrawals and critical profile changes (password, bank account, etc) is that it would reduce Assetz costs paid to Authy by >90%.
|
|
|
|
Post by chris on Jul 10, 2018 9:14:27 GMT
crabbyoldgit - once set up Authy works offline with no internet connection, you just open the app, select the site / service you wish to authenticate, and type in the code that is shown in your web browser. Push notifications work over the internet without requiring a mobile phone signal. You can also opt to use your landline as 2FA. I'm not at all keen on using third party apps but having the landline ring every time I want to log in is just not practical in a home occupied by more than one person. Someone said you need a mobile phone to do the initial set up with Authy, is this the case please or can someone without a mobile use Authy? AIUI you need a mobile phone to receive an SMS to do the initial setup. From that point on you no longer need a mobile phone.
|
|
|
|
Post by chris on Jul 10, 2018 9:15:19 GMT
The service is Authy, and we pay them per login. That is how they commercialise the relationship. The open source solutions are not as complete nor easy to integrate with as Authy, and we are paying for that simplicity. Therefore the business case to reduce 2FA to only be required for withdrawals and critical profile changes (password, bank account, etc) is that it would reduce Assetz costs paid to Authy by >90%. This isn't about cost it's about securing your funds. I'll push again to allow lenders to opt-out of 2FA on login but can't make any promises.
|
|
metoo
Member of DD Central
Posts: 555 
Likes: 432
|
Post by metoo on Jul 10, 2018 9:22:33 GMT
I decided to try Authy and actually I am finding it quick and easy to use, albeit an app had to be installed (SMS/phone message for each login is the alternative). Anyone with a smartphone would probably find that the easiest way to generate a code for any device they happen to be using. Because I don't use a smartphone, I installed the iPad app and the Windows 10 desktop app ( authy.com/download/) so it doesn't matter which I'm using. There is also a Chrome app (including on Linux). The Authy part of the login takes only a few seconds (about 4 seconds in Windows). This is instead of the time to type in the memorable data. I had never encountered Authy before today but I understand why 2-factor is much stronger than password/memorable data alone. This is a security improvement. However unless it is made optional except for access to personal details and withdrawals, it may well remain very unpopular with many. chris the initial setup of Authy can be done with a landline. |
|
lobster
Member of DD Central
Posts: 636
Likes: 467
|
Post by lobster on Jul 10, 2018 9:23:12 GMT
So tell me , how long will it be until 3FA ? 4FA ? (n+1) FA ?
All to keep me safe of course - nothing to do with keeping the provider safe by reducing the chances of litigation .....
|
|
registerme
Member of DD Central
Posts: 6,618
Likes: 6,432
|
Post by registerme on Jul 10, 2018 9:23:44 GMT
Not sure if other people have picked up on this, but it's not mandatory...., yet (not that the email sent out provides a date as to when it will be mandatory). So for now, you don't need to set it up. This might provide Chris with some time to talk his people into making it less onerous......
|
|
p2pete
Member of DD Central
Posts: 144
Likes: 142
|
Post by p2pete on Jul 10, 2018 9:24:57 GMT
The login process hasn't changed for me. When does this come into force?
|
|
|
|
Post by chris on Jul 10, 2018 9:27:11 GMT
Not sure if other people have picked up on this, but it's not mandatory...., yet (not that the email sent out provides a date as to when it will be mandatory). So for now, you don't need to set it up. This might provide Chris with some time to talk his people into making it less onerous...... Current timeline is that lenders will be prompted every login but can still skip the 2FA setup from next Monday, with it becoming mandatory the following Monday (23rd).
|
|
dandy
Posts: 427
Likes: 341
|
Post by dandy on Jul 10, 2018 9:34:54 GMT
I am amazed at the length of this thread and the uproar by some at AC just for trying to increase our security - we live in a world with increasing likelihood of cyber attacks of all forms and any financial institution seeking to increase our protection against that should be applauded not castigated
That said, there are some good suggestions here such as 2FA for limited actions only - worthy of some consideration - although I am not sure it will really help that much except for viewing our account. An 'opt out' would be another possibility provided it does not mean AC can alleviate themselves of their existing security responsibilities to us
|
|
Steerpike
Member of DD Central
Posts: 1,977
Likes: 1,687
|
Post by Steerpike on Jul 10, 2018 9:36:58 GMT
I know that some folk use phone, laptop, and PC to access their accounts, chris are there issues or difficulties using multiple devices with Authy? |
|
|
|
Post by chris on Jul 10, 2018 9:38:04 GMT
I know that some folk use phone, laptop, and PC to access their accounts, chris are there issues or difficulties using multiple devices with Authy? None at all, Authy is designed to allow use across multiple devices.
|
|
SteveT
Member of DD Central
Posts: 6,875
Likes: 7,924
|
Post by SteveT on Jul 10, 2018 9:40:44 GMT
I know that some folk use phone, laptop, and PC to access their accounts, chris  are there issues or difficulties using multiple devices with Authy? None at all, Authy is designed to allow use across multiple devices. Does it allow use for multiple AC accounts from the same device?
|
|
