Hacker News Reader

so you can't login to a bank website in the EU without having their app on your phone? WTF. Really? When did that happen? I know UK isn't in the EU anymore, but NatWest (UK bank) doesn't need me to have an app -- I can get an sms code.

View on HN

No, but (at least in my country) most banks have used the PSD2 directive as a way to phase out HW tokens and force their proprietary apps to customers. But PSD2 does not really say this is required to comply.

The only alternative they offer is SMS-based 2FA which, unsurprisingly, often has an additional cost.

Reply on news.ycombinator.com