> Maybe your phone doesn't have banking and stuff on it
I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
My iPhone passcode was either unset or 2222 until like 2018. At times it was jailbroken af. It had messaging and stuff. Wouldn't have been the end of the world if someone hacked it, and nobody did.
> Maybe your phone doesn't have banking and stuff on it
I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
Passkeys are the standardized version of the bank's proprietary app. Well, except for the device attestation part, that won't happen on iPhones.
I think you meant to say TOTP.
1 reply →
USA, Chase lets me set a passkey
If your phone does not have any important or sensitive on it, why even secure it?
> If your phone does not have any important or sensitive on it, why even secure it?
Or why have a smartphone in the first place if you're not going to put any sort of meaningful apps on it. ;)
My iPhone passcode was either unset or 2222 until like 2018. At times it was jailbroken af. It had messaging and stuff. Wouldn't have been the end of the world if someone hacked it, and nobody did.
2 replies →