logoalt Hacker News

traceroute66 • today at 5:20 PM • 3 replies • view on HN

> Maybe your phone doesn't have banking and stuff on it

I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.

Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.


Replies

tadfisher • today at 5:40 PM

Passkeys are the standardized version of the bank's proprietary app. Well, except for the device attestation part, that won't happen on iPhones.

➕ show 1 reply
mahboi • today at 5:22 PM

USA, Chase lets me set a passkey