Hacker News Reader

I'd be curious to know what bank does actually proper authentification ? Like 2fa with otp code or passkey.

I went through quite a few bank in my life, some old style bank, some all internet bank, they were all some shade of horrible.

Neither offered proper authentification method.

View on HN

Vanguard on Web supports Passkeys for 2fa, but the iOS app seems to only support text-sms 2fa.

Robinhood supports passkey login on iOS app but doesn’t seem to require it for 2fa, email+password succeeds with no further prompts. But on Web it doesn’t support passkey at all, and email+password requires you to confirm auth via an in-app notification.

Both Robinhood and Vanguard support FaceID biometric auth for their apps.

All I want is passkey auth everywhere and/or email+password with options for passkey and TOTP for 2fa.

Ugh.

In the US, I am seeing biometric authentication, and/or 2fa on mobile apps for financial institutions. The issue is that these same institutions are still running their websites that have the same security that was around in the early 2000's. You can take advantage of the mobile application and get better security, but you're still a target to someone that just accesses the website.

Reply on news.ycombinator.com