Add 2-Factor Authentication/Multi-Factor Authentication to App [edited] (2 Merged Votes)

13

Comments

  • It would be awesome if you could support multi-factor authentication for your Quicken account. Preferably Google Authenticator or the like.

  • RobWilk
    RobWilk Superuser ✭✭✭✭✭
    edited November 2023

    Rather than starting with 1-vote, consider voting on the existing idea here (scroll to top of page 1):

    [removed link to merged thread]


    Rob Wilkens

  • RobWilk
    RobWilk Superuser ✭✭✭✭✭

    Google authenticator, though, is only as secure as your google password, since it's backed up to google's servers (they may have access to your codes). I use it, too, though because it's an extra "layer" of security.


    Rob Wilkens

  • Thanks I just found that page! I can close this one.

  • J.Shwa
    J.Shwa Member

    I'm a Mint customer transfer and am surprised that Simplifii doesn't have MFA. This is a MUST-HAVE
    Upvoting this request with both thumbs!!

  • kollock
    kollock Member

    Man, came here looking for a feature request to disable 2FA on the web. It's a read only platform. At least having 2FA be optional would be nice.

  • MUST-HAVE for authentication on Simplifi. Please implement sooner than later. Someone remarked that it's a read-only platform, but there are lazy individuals who leave passwords lying around on desks or in drawers. I doubt these folks would want someone looking at their financial information, especially transactions and balances.

  • Brian23
    Brian23 Member ✭✭

    Wait, when did SMS MFA get added?

  • Being able to use a 2FA app and not just a text code would be very nice.

  • Brian23
    Brian23 Member ✭✭

    I'm still not prompted for SMS 2FA, even when trying incognito.

  • Bobbysox
    Bobbysox Member

    Agreed and added a +1 vote.

    Would like to see options for an authenticator app (Authy, Google Authenticator, etc) as well as security keys to secure this data both on mobile and in the webapp.

  • kash80
    kash80 Member

    +1 vote for authenticator app based 2FA. My wife and I used mint before and used Authy. Now, I need to be around if she needs to login.

  • Yes, please add 2FA TOTP support, e.g., Google Authenticator. Everyone knows SMS is not secure, i.e., SIM swapping, etc.

  • How does one upvote a feature request? Is it a comment alone?

  • whyme
    whyme Member ✭✭

    Yes, add MFA

  • Recent emigre from Mint. Shocking that even after a restart on desktop Mac, all my financial just pops up when I launch the site. Not even a simple password request, much less MFA. I'm not a security freak, but I find it disconcerting to say the least.

  • RBSimplify
    RBSimplify Member

    Security loop hole , being so many accounts information there is no MFA to enable for logins as in this current security cybersecurity world, mfa is minimum so we can feel safe

  • I believe two-factor authentication should be a high priority for the app since it contains my financial details, including account information for my bank accounts, CC, etc. PLEASE add this soon!

  • Agreed!!!!! It needs to connect to an authenticator app at the very least. I would like the option to need to use a security key to access it.

  • Marky D
    Marky D Member

    This thread started in 2019. It is now 2024. A paid for service like Simplifi should have MFA.

  • Moving over from Mint (Intuit Product). Don't you guys talk to each other. Mint had 2FA and also had an interface for Citi Cards. Get with the program, please.

  • ajbopp
    ajbopp Member ✭✭✭✭

    FYI, Quicken and Quicken-Simplifi are not Intuit products.

    Anthony Bopp
    Simplifi User Since July 2022
    Money talks. But all my paycheck ever says is goodbye

  • UrsulaA
    UrsulaA Superuser ✭✭✭✭
    edited February 5

    The mobile app has some MFA options. Your request already exists vote for it below. The more votes, the more likely your request will be considered.

    [removed link to merged thread]

    Simplifi User Since Nov 2023

    Minter 2014-2023

    Questionable Excel before 2014 to present

  • Marky D
    Marky D Member

    What exactly is there to vote for here?! Do we want our money and credentials safe? YES. Why this is not a top priority within Quicken is troubling.

  • johneee
    johneee Member
    edited February 27

    Bumping this! MFA is imperative for financial apps. RSA is literally on the way out the door with the advent of quantum computing. This company is putting all of our financial data at risk by not implementing ASAP.

    How was the last post on this in 2022. I will not renew my subscription if this is not remedied.

  • New user here, just signed up. First thing I did was look in the security settings to enable OATH TOTP, but… could only find SMS. I agree, it's rather disappointing.

  • rhayle
    rhayle Member

    Simplifi DOES have MFA. I'm seeing a lot of misinformation here. What I would like to see is TOTP support instead of SMS-based MFA, which is inherently insecure. Either the description of this issue should be updated, or it should be closed as complete.

  • Adele F
    Adele F Member

    It is absurd to me that an application that has all of a person's financial information in it would not provide MFA. The web application needs it more than the desktop application as the web is much more accessible than an application on my desktop. I just subscribed to this service today and am very seriously considering canceling my subscription due to this major hole in security. Please get this addressed ASAP.

  • RobWilk
    RobWilk Superuser ✭✭✭✭✭

    @Adele F For the web app, I'm prompted for text-message-code verification the first time i sign in on a new computer (or after clearing cookies) to the best of my knowledge. That is MFA for the web app. Some people would prefer Google Authenticator verification, but that is slightly less secure than Text Message verification because it's backed up to google and anyone with access to your google account (including, likely, google employees who may be able to reset your password or otherwise access it) can get those codes.


    Rob Wilkens

  • 5impl5abi
    5impl5abi Member ✭✭

    Clarification: "Google Authenticator" 2-step verification (2SV) is used synonymously with one-time passcode (OTP) authentication (learn more https://en.m.wikipedia.org/wiki/One-time_password ).

    Google's Authenticator is an easily recognized OTP app, but many, many apps support OTP. To be clear, OTP is more secure than SMS because it's not subject to SIM swapping and account takeover attacks ( https://en.m.wikipedia.org/wiki/SIM_swap_scam ).

    REQUEST: Quicken should support Username, Password, + OTP as a default option in 2024, especially since you aggregate, store, and process our financial information.