Whenever I want to log on to bill pay now, it says, Choose a verification method. To provide you with the best protection, choose a 2-Step Verification method to verify your identity. Text me a temporary code, or Verify using the Capital One mobile app. Didn’t have to go through all this stuff before. I don’t use the mobile app, and why can’t they email me a code like every every other log in service has instead of using text so I don’t have to get up from the computer, find my phone, read the text and enter the code into the box? Do other bank bill pay systems make you go through these extra steps?
This is an automatically-generated Wiki post for this new topic. Any member can edit this post and use it as a summary of the topic’s highlights.
Many do. Some will use a cookie so it doesn’t ask you for a few weeks.
You can use Google Voice for your 2FA number so you don’t have to leave the computer or look for your phone. Some banks don’t allow GV for 2FA, but I think CapOne allows it.
Does Google Voice act like a cell phone that can get text? Still would be simpler to get an email of the code.
It can receive texts. It can also forward text to the associated gmail account (but from gmail you can forward anywhere you want).
I’m ok with some level of insecurity if someone else wants to pay my CC bill .
Well… they can add another account so that you end up paying their credit card bill. I can understand why they’d want to MFA bill pay, although I am a bit surprised it isn’t required to log in to the main account.
All that said, I wish banks would move to TOTP or passkey/yubikey style 2FA. I much prefer tapping my yubikey to provide MFA as opposed to having to wait for a six digit code from my phone.
Curious why use six digit code vs 3-4 digit. Lock it if XXX attempts…