Phil Windley

MAY 2, 2022

The problem with USAA was 2FA. Watch apps for 2FA are "companion apps" meaning they're worthless without the phone. For TOTP 2FA, I'd mirrored to my iPad, so that worked fine. I've already mentioned 2FA, another is maps. Tags: apple watch iphone. The one exception was USAA. USAA uses Verisign's VIP.

Apple 100

Apple Banking Policies Mobile 100

Phil Windley

JANUARY 2, 2023

Choose whether to use 2FA or security questions to secure your account. I chose 2FA. Continue with 2FA. Tags: verifiable+credentials ssi identity web. Enter the four-digit code that was sent to the email address you gave in (1). Solve the captcha. Verify your phone number using SMS or WhatsApp (they recommend WhatsApp).

Authentication 52

Authentication Security Programming 52

Phil Windley

FEBRUARY 12, 2021

Then, if you use multi-factor authentication (and you should), you get to open up your phone, find the 2FA app, get the code, and type it in. Tags: identity passwords authentication ssi. You open up your password manager (a few clicks) and fill the username and only then does it show you the password field 1. Others don't.

Authentication 144

Authentication Banking Mobile Airlines 144

Phil Windley

NOVEMBER 9, 2021

Different locations and modalities, different rules for passwords, different methods for 2FA, and so on. Tags: identity ux wallets ssi. You probably do it way too often. But it's also made much more complex because it's slightly different everywhere. It's maddening. There's a saying in security: "Don't roll your own crypto."

Authentication 98

Authentication System Internet Video 98

Phil Windley

JUNE 27, 2022

Then, if you use multi-factor authentication (and you should), you get to open up your phone, find the 2FA app, get the code, and type it in. Tags: identity web mobile oauth cookies. You open up your password manager (a few clicks) and fill the username and only then does it show you the password field 1. Barth ( CC0 1.0 ).

Authentication 72

Authentication Mobile Banking Security 72

Phil Windley

SEPTEMBER 28, 2020

The controller usually generates the authentication factors by choosing a password, linking a two-factor authentication (2FA) mechanism, or generating keys. Tags: identity identifiers relationships ssi root+of+trust namespaces architecture trust. Photo Credit: Skysong Center from Phil Windley (CC BY-SA 3.0

Architecture 138

Architecture System Authentication Security 138