Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> ever put such a critical item as banking app on their phone?

Laziness has nothing to do with it.

Why? Three of my bank accounts cannot be accessed without a phone app, and some of my credit cards will not authorise payments without a phone app. It's not a choice.

Two of the bank accounts do have web banking too, i.e. from a desktop browser. But you have to use the phone app to authenticate the browser login! I found this out the hard way, when my phone screen died so I couldn't login to web banking on my laptop.

I called customer support, hoping to use phone banking to make some payments. They told me they could not do anything until I obtained a new working phone, moved my SIM or phone number over, and then they could transfer the authentication to the new device. Other than that, they had no options for logging in. It was fine to borrow someone else's phone if I wanted, installing the bank app on there, but I couldn't login without a phone.

I had to go through this again when the second phone died a few months later.

Now, I'm guessing you're thinking "use a different bank, duh!". Turns out I didn't have a choice of non-app banks when I needed to open a business account during the pandemic, in order to accept a contract, which I needed. My credit rating was not rosy either, greatly limiting which card services I could choose. Things are easier now, thanks.



Some banks certainly don't help themselves when it comes to security practises they foist on their customers.

My bank supports 2FA, but only via SMS...


My bank sent me a little fob that generates a one time code. Of course, they will also use SMS, the app on your phone, or email for 2FA. They are all considered equally valid and there is no intermediate step should you wish to use one over the other at any time.

So really the fob is theater.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: