logoalt Hacker News

hellojesusyesterday at 5:19 PM1 replyview on HN

> some banks still require an app for 2FA, or windows...

Are these limited to only "approved" apps? Usually you can add an auth to an app via a qr code or string. Why can't people use whatever auth app they want, or even just roll their own?


Replies

em-beeyesterday at 6:16 PM

it's something nonstandard, so there are no approved apps, but it is only the app provided by the bank and nothing else. there used to be two, one for auth only and one for onlinebanking itself, which was optional because you could use auth to log into the web. as i understand it they merged the two apps and now only support the all-in-one app. apparently the banking features of the app can be turned off, but i could not see if that can be locked too.