Multi factor authentication in online banking in Canada?
#1
Thread Starter
BE Enthusiast





Joined: Oct 2016
Posts: 885











Are bank only going to accept smart phone apps in Canada if mutlifactor authenication in online banking is done?
The problem I have, is that I don't have a smart phone and am often in a location where there is internet access, but no phone reception.
This "smart phone apps crase" is in my opinion a bit scary when it comes ot multi factor authenication. And then there is also my personal scare that cell phones and apps on cell phones can be hacked.
Many other banks like HSBC in the UK or others in Europe do offer some key-pad. It seems they are not that common in Canada?
Any ideas on this?
The problem I have, is that I don't have a smart phone and am often in a location where there is internet access, but no phone reception.
This "smart phone apps crase" is in my opinion a bit scary when it comes ot multi factor authenication. And then there is also my personal scare that cell phones and apps on cell phones can be hacked.
Many other banks like HSBC in the UK or others in Europe do offer some key-pad. It seems they are not that common in Canada?
Any ideas on this?
#2
It's not always obvious but sometimes there's a hidden option, like personal questions. They used to be offered as part of the process but I discovered that by clicking on "code/test not received" other options were then offered.
I don't have a smart phone either, just a land line.
I don't have a smart phone either, just a land line.
#3
dah diddly dah



Joined: Jan 2015
Posts: 177
From: White Rock BC











It's not always obvious but sometimes there's a hidden option, like personal questions. They used to be offered as part of the process but I discovered that by clicking on "code/test not received" other options were then offered.
I don't have a smart phone either, just a land line.
I don't have a smart phone either, just a land line.
I would very much welcome an alternative to 2FA as I worry about losing or having my phone stolen and for that reason, plus the growing danger of having the phone hacked, resist using any sort of app where possible. Sometimes it is necessary to load an app just to get info to access a website. Take BC's Health Gateway for example https://www.healthgateway.gov.bc.ca/ it claims to offer log-in by BC Services Card but to do that, an app must be installed to get a password!! It also states "You do not need a username and password to log in from a computer or laptop. You can use the mobile app." How do I get a mobile app on my computer or laptop? What am I missing?
#4
-
I would very much welcome an alternative to 2FA as I worry about losing or having my phone stolen and for that reason, plus the growing danger of having the phone hacked, resist using any sort of app where possible. Sometimes it is necessary to load an app just to get info to access a website. Take BC's Health Gateway for example https://www.healthgateway.gov.bc.ca/ it claims to offer log-in by BC Services Card but to do that, an app must be installed to get a password!! It also states "You do not need a username and password to log in from a computer or laptop. You can use the mobile app." How do I get a mobile app on my computer or laptop? What am I missing?
I would very much welcome an alternative to 2FA as I worry about losing or having my phone stolen and for that reason, plus the growing danger of having the phone hacked, resist using any sort of app where possible. Sometimes it is necessary to load an app just to get info to access a website. Take BC's Health Gateway for example https://www.healthgateway.gov.bc.ca/ it claims to offer log-in by BC Services Card but to do that, an app must be installed to get a password!! It also states "You do not need a username and password to log in from a computer or laptop. You can use the mobile app." How do I get a mobile app on my computer or laptop? What am I missing?
I have apps for Netflix on my computer as well as access to the normal website and also Netflix app on the smart TV, firestick and so on.
I have an app for my bank on a tablet that can take a picture of a cheque and make a deposit to the account but as far as I know there isn't one from that bank for a computer.
Fortunately my bank isn't insisting on texting a cellphone I don't have, I can get a voice code on my landline.
Thinking about it more, I think I have two different accounts where selecting no code/text received has allowed me to choose an alternative.
#5
TD had it's own TD Authenticate app which you use to generate a code that you enter when you login to the website on a computer, and I suspect their TD app would use that code too, if you're not using something like fingerprint or face ID to unlock the app.
I personally prefer using a 2FA app such as Authy to add in logins that support 2FA codes. I have the app on my phone and my computer, and the data syncs between the two.
I would very much like it if other banks, eg Tangerine, and also the CRA website would add that level of 2FA authentication, rather than using a code that is sent via SMS, as it is possible for people to port out your phone number and thus get the security SMS and login. This leads nicely into me wishing public mobile also adopted the 2FA app code approach rather than SMS codes, because you'd think a cell provider would be very aware of the port out issue and would want to make log in to a users account not just using sms codes.
I personally prefer using a 2FA app such as Authy to add in logins that support 2FA codes. I have the app on my phone and my computer, and the data syncs between the two.
I would very much like it if other banks, eg Tangerine, and also the CRA website would add that level of 2FA authentication, rather than using a code that is sent via SMS, as it is possible for people to port out your phone number and thus get the security SMS and login. This leads nicely into me wishing public mobile also adopted the 2FA app code approach rather than SMS codes, because you'd think a cell provider would be very aware of the port out issue and would want to make log in to a users account not just using sms codes.
#6
BE Enthusiast





Joined: Sep 2014
Posts: 861
From: Vancouver, BC











TD had it's own TD Authenticate app which you use to generate a code that you enter when you login to the website on a computer, and I suspect their TD app would use that code too, if you're not using something like fingerprint or face ID to unlock the app.
I personally prefer using a 2FA app such as Authy to add in logins that support 2FA codes. I have the app on my phone and my computer, and the data syncs between the two.
I would very much like it if other banks, eg Tangerine, and also the CRA website would add that level of 2FA authentication, rather than using a code that is sent via SMS, as it is possible for people to port out your phone number and thus get the security SMS and login. This leads nicely into me wishing public mobile also adopted the 2FA app code approach rather than SMS codes, because you'd think a cell provider would be very aware of the port out issue and would want to make log in to a users account not just using sms codes.
I personally prefer using a 2FA app such as Authy to add in logins that support 2FA codes. I have the app on my phone and my computer, and the data syncs between the two.
I would very much like it if other banks, eg Tangerine, and also the CRA website would add that level of 2FA authentication, rather than using a code that is sent via SMS, as it is possible for people to port out your phone number and thus get the security SMS and login. This leads nicely into me wishing public mobile also adopted the 2FA app code approach rather than SMS codes, because you'd think a cell provider would be very aware of the port out issue and would want to make log in to a users account not just using sms codes.
#7
Maybe we should just go back to card readers.
#8
BE Forum Addict






Joined: Jan 2008
Posts: 1,324
From: Near Kingston, Ontario











cash is king




