undefined | Better HN

0 pointsjeromegv6y ago0 comments

Their 2FA policy is awful, SMS or nothing. At least that's the case in Canada (I heard it might be different in other regions).

0 comments

4 comments · 1 top-level

Thorrez6y ago· 3 in thread

Just now I (in the US) added TOTP (Google Authenticator) 2FA, and removed my old SMS 2FA. It does seem a bit laggy but I was able to do it and log in.

efreak6y ago

PayPal allows directly adding totp now? When I added 2fa, I had to use a python script that emulates the stupid Symantec software they were using in order to get the secret; it instead gave you a code to give the Symantec app, which prevented you from using 3rd party apps.

Thorrez6y ago

Yes, I think it's somewhat recent. The previous time I checked it didn't let me, now it does. I found this from 6 months ago mentioning it might only be US accounts[1], and this from March[2].

[1] https://www.reddit.com/r/YouShouldKnow/comments/a59knq/ysk_p...

[2] https://benbrian.net/authenticator-app-support-in-paypal-fin...

Doubl6y ago

Yes I (in eu) only recently added 2FA and I'm using Google authenticator

j / k navigate · click thread line to collapse