Bank scams security

[RTM]

Yes, I like the 2 Factor approach,
My primary bank is BNZ. While I can and do have two factor switched on on web based (PC) access,
on iPad and iPhone it is not available.

Or am I not correct ?

[justakiwi]

I don't bank with BNZ so can't answer that, but you can set up biometric login on your iPhone (and presumably your iPad);

Setting up Touch ID or Face ID on compatible devices

1. Log in to the BNZ app.
2. From the main screen, tap the Menu icon (three horizontal lines) in the top-left corner.
3. Tap Settings then under Security, select either Touch ID or Face ID.
4. Tap the (Touch ID or Face ID) button to turn on or off.

There really is nothing that provides greater security than biometric log in.

Yes, I like the 2 Factor approach,
My primary bank is BNZ. While I can and do have two factor switched on on web based (PC) access,
on iPad and iPhone it is not available.

Or am I not correct ?

[RTM]

Update
Yes…when logging in cancelling the biometric allows either Password or a PIN to be used.
So…not as secure as one would hope.
Didn’t see anywhere to turn that off…but may have missed it.
I recall I emailed BNZ about this a while ago. Got a response confirming I was correct….doesn’t seem anything has changed.

Again….more than happy to be corrected if there is a setting I have missed.


——————
Thanks…and yes…I have those set up already.
But my impression is that this would still allow normal username /password access as well.
Will check.

As an aside…it’s a bit worrying when one wakens in the morning and the iPhone won’t recognise you,
Oh dear !

[justakiwi]

Yeah, you are correct. Not sure if this will make you feel any better, but I found this info on the BNZ site;

Secure tokens

A secure token is created on your device when you first set up the BNZ app. This lets us know that it’s you using it and not someone else.

Update
Yes…when logging in cancelling the biometric allows either Password or a PIN to be used.
So…not as secure as one would hope.
Didn’t see anywhere to turn that off…but may have missed it.
I recall I emailed BNZ about this a while ago. Got a response confirming I was correct….doesn’t seem anything has changed.

Again….more than happy to be corrected if there is a setting I have missed.


——————
Thanks…and yes…I have those set up already.
But my impression is that this would still allow normal username /password access as well.
Will check.

As an aside…it’s a bit worrying when one wakens in the morning and the iPhone won’t recognise you,
Oh dear !

[clip]

Update
Yes…when logging in cancelling the biometric allows either Password or a PIN to be used.
So…not as secure as one would hope.
Didn’t see anywhere to turn that off…but may have missed it.
I recall I emailed BNZ about this a while ago. Got a response confirming I was correct….doesn’t seem anything has changed.

Again….more than happy to be corrected if there is a setting I have missed.


——————
Thanks…and yes…I have those set up already.
But my impression is that this would still allow normal username /password access as well.
Will check.

As an aside…it’s a bit worrying when one wakens in the morning and the iPhone won’t recognise you,
Oh dear !

I think you are right that the mobile app doesn't support 2fa - the assumption being, if somebody has your phone and opens the BNZ app, if it sends you a text message they will have that anyway as they have your phone

[RTM]

I think you are right that the mobile app doesn't support 2fa - the assumption being, if somebody has your phone and opens the BNZ app, if it sends you a text message they will have that anyway as they have your phone

Just back from Matauri Bay...awesome body boarding.

Yes...I agree. But they might have dreamed up other ways to give an element of 2FA.
Or allow you to turn off the normal password or Pin access and just use the Biometric.
This would be my preferred option.

[clip]

Just back from Matauri Bay...awesome body boarding.

Yes...I agree. But they might have dreamed up other ways to give an element of 2FA.
Or allow you to turn off the normal password or Pin access and just use the Biometric.
This would be my preferred option.

It would be more secure to turn off the pin option, and use a very good password. Better to use something long, and made of multiple words, at least 16 characters. Instead of a word followed by a couple of numbers and a special character