Hacker News Reader

Their 2FA policy is awful, SMS or nothing. At least that's the case in Canada (I heard it might be different in other regions).

View on HN

Just now I (in the US) added TOTP (Google Authenticator) 2FA, and removed my old SMS 2FA. It does seem a bit laggy but I was able to do it and log in.

Yes I (in eu) only recently added 2FA and I'm using Google authenticator

PayPal allows directly adding totp now? When I added 2fa, I had to use a python script that emulates the stupid Symantec software they were using in order to get the secret; it instead gave you a code to give the Symantec app, which prevented you from using 3rd party apps.

Yes, I think it's somewhat recent. The previous time I checked it didn't let me, now it does. I found this from 6 months ago mentioning it might only be US accounts[1], and this from March[2].

[1] https://www.reddit.com/r/YouShouldKnow/comments/a59knq/ysk_p...

[2] https://benbrian.net/authenticator-app-support-in-paypal-fin...

Reply on news.ycombinator.com