[URGENT] Add 2 Factor Authentication on main site/app

[tsukeyomi]

Hi,

I don’t see a way to enable 2FA on your main site ( https://live.trading212.com ). A bit absurd, the community package you’re using here (Discourse) supports it.

Given the amount of assets and value handled by your main site, it is in your best interest to protect both your users and yourself by implementing a way to enable 2FA as soon as possible.

Ideally, users should be able to enable 2FA by scanning a barcode through a mobile app (much like it happens here in the community forums) and they should also have a way to enable 2FA through SMS; if 2FA through SMS is too technically challenging/expensive, I think 2FA with app is a very good and needed first step in the right direction.

Please do consider this very important topic about security. I also encourage fellow users to raise awareness and priority on this suggestion by liking and bumping this thread until a solution is given.

Thanks to Trading 212 and all the staff for the hard and dedicated work you put in the platform.

[Vedran]

https://community.trading212.com/t/why-no-two-factor-authentication/1169/3?u=vedran

Security code login

2FA was planned a lot earlier. But then came an avalanche of new clients and we had to temporarily switch our priorities to scaling. We’ll update you with a new deadline for the 2FA release.

Security code login

We started working on that yesterday. Currently in design stage. Will enter implementation probably next week.

Security code login

2FA should be out in about 2 weeks.

Why no Two-Factor Authentication?

That’s literally impossible. If you deposit $10,000 via card 1234, and later on you deposit $1 using card 6789 (presumably the fake one), then we will not refund $10,000 towards card 6789. Its a standard AML precaution. Neither someone can remove that easily the card 1234 from our system - we’ll need a document issued by your bank, which confirms that the card has expired/stolen/etc. Moreover, an email confirmation is sent upon withdrawal. So you’ll be notified additionally. And if someone d…

[tsukeyomi]

Thanks Vendran. I see it should be almost ready, which is indeed good news.

But I couldn’t find a specific ETA about release, do we have any?

[KanseiDorifto]

I agree with the poster, and I am glad about the good news regards this feature

[anon]

Im sorry but no its not good enough.

Those links were from July, its September so its no where near completion. 2 Weeks was a date provided in May…

[Vedran]

It will be released when ready. Check final post link if you have security concerns.

[CavanHaganInvesting]

Respect for the amount of time it must have taken to find all these posts

[PorterOldSlug]

You wouldn’t have happened to use the search function would you?

[Vedran]

Nah, I went topic by topic, post by post, until I collected the answers for OP.

What is this search people keep mentioning? Something to eat?

[Zergui]

How ironic (20 characters)

[Valerya.ba2]

@MicaDennis

Hey there! I totally understand the need to keep your 2fa phone number separate and secure. Personally, I use a phone number generator with SMS capabilities for work-related 2fa. It just gives me that extra peace of mind knowing that my work-related accounts are extra protected. It’s always better to be safe than sorry, right? Keep up the good security habits!

no spam, of course