# Why no Two-Factor Authentication? **URL:** \ **Category:** 🤝 Help\ **Created:** [February 1, 2020, 4:27pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169 "2020-02-01T16:27:35Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![AlinMC](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/alinmc/32/324_2.png) [@AlinMC](https://community.trading212.com/u/AlinMC)\ **Post date:** [February 1, 2020, 4:27pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/1 "2020-02-01T16:27:35Z")
Hi, 2FA or MFA have become a security standard nowadays. Even simple websites use it, not to mention online brokers. I believe this is a big minus for Trading 212 in regards to the competition, it sends an untrustworthy message. And the solution should be quite simple. Is there a plan to introduce this feature? On both mobile app and website of course. It’s somewhat funny that even this community forum has 2FA option, but not the actual platform… where security breaches’ impacts are astronomically higher. Thanks! ---
**Author:** ![Vedran](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/vedran/32/182_2.png) [@Vedran](https://community.trading212.com/u/Vedran)\ **Post date:** [February 1, 2020, 4:36pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/2 "2020-02-01T16:36:34Z")
Ideally they(t212) would use risk factor authentication. Where as in high risk it asks for step up auth. Meaning not just fingerprint/pass but also Sms/otp or push notific. But lower risk would only require fingerprint/pass. Risk is based on AI learning each users pattern aka device used , location , time etc… Somehow , I am not impressed at having google token or MS token as 2fa when I am accessing app via mobile. It would make sense if you use mobile purely for auth, but other device to actually access the application. To have any purpose of MFA. ---
**Author:** ![AlinMC](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/alinmc/32/324_2.png) [@AlinMC](https://community.trading212.com/u/AlinMC)\ **Post date:** [February 2, 2020, 10:06am UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/4 "2020-02-02T10:06:30Z")
Ah perfect! Thank you ---
**Author:** ![funkies\_rd](https://avatars.discourse-cdn.com/v4/letter/f/c77e96/32.png) [@funkies\_rd](https://community.trading212.com/u/funkies_rd)\ **Post date:** [March 30, 2020, 10:13am UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/5 "2020-03-30T10:13:27Z")
> [@Vedran](#): > > deally they(t212) would use risk factor authentication. Where as in high risk it asks for step up auth. Meaning not just fingerprint/pass but also Sms/otp or push notific. > > But lower risk would only require fingerprint/pass. > > Risk is based on AI learning each users pattern aka device used , location , time etc… > > Somehow , I am not impressed at having google token or MS token as 2fa when I am accessing app via mobile. It wou It was also in my mind as well and good to hear that 2FA is prioritised, ---
**Author:** ![bean](https://avatars.discourse-cdn.com/v4/letter/b/f19dbf/32.png) [@bean](https://community.trading212.com/u/bean)\ **Post date:** [April 2, 2020, 2:41pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/6 "2020-04-02T14:41:27Z")
really needed. is there an ETA? ---
**Author:** ![Vedran](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/vedran/32/182_2.png) [@Vedran](https://community.trading212.com/u/Vedran)\ **Post date:** [April 2, 2020, 5:45pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/7 "2020-04-02T17:45:18Z")
You dont rush security features… Proper complex password takes ages to break. 12+ Characters, numbers, upper lower bracket, special characters and you are good to go. > **[Complex Passwords Harder to Crack, but It May Not Matter](https://www.inetsolution.com/blog/june-2012/complex-passwords-harder-to-crack,-but-it-may-not)** > > If your organization provides any computer security training at all then it should be no news to you that long, complex passwords are more difficult to crack than the more simple passwords that most users choose today; however, nearly all people I’ve... ---
**Author:** ![Dao](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/dao/32/20739_2.png) [@Dao](https://community.trading212.com/u/Dao)\ **Post date:** [April 2, 2020, 6:53pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/8 "2020-04-02T18:53:05Z")
as long as a password ‘can’ accept numbers, upper and low case, special symbols. then even if your password doesnt have them all, it sees the same time protections as the hack has to go through those additional variations regardless. It’s better if people thing of it as “passphrase” instead of “password”, ultimately if your password is just 8 characters long, it doesnt matter how complex it is and how many things can be put in it, typical password hacks involve AI and it will just brute force its way in without taking too long. if its too complex you end up recording it somewhere which then becomes the weakspot of your account. make a passphrase of about 32 characters that is easy for you to remember without writing down anywhere and you will never face this issue. the only true protection with passwords now are length. the longer the password (that can’t be guessed), the more secure your account. ---
**Author:** ![drtinvest](https://avatars.discourse-cdn.com/v4/letter/d/bbe5ce/32.png) [@drtinvest](https://community.trading212.com/u/drtinvest)\ **Post date:** [April 15, 2020, 10:33pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/9 "2020-04-15T22:33:12Z")
Hello, Any updates on this? I am concerned of seeing some traces on the internet containing your company data which might have been phishing attempts. For example there are cached sites like fxforex or obexforex which contained your data, but these names do not seem to appear in the Companies House or FCA registries. Either if they were real names or phishing attempts, I think in both cases these events should appear in your Help section, so people can be informed. It seems a bit strange that you do not have a Security section … Thank you! ---
**Author:** ![Ghua](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/ghua/32/1571_2.png) [@Ghua](https://community.trading212.com/u/Ghua)\ **Post date:** [May 2, 2020, 9:50am UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/10 "2020-05-02T09:50:54Z")
I am also waiting for this to be resolved. I find it really weird financial site which claims to be super safe doesnt have such basic feature. I am not gonna trust t212 with any substantial money before 2fa is introduced. And to people who claim regular password are hard to hack - your password can be stolen by malware when you type it. With 2fa there is additional layer of security - your phone is required. Sort it out pls ---
**Author:** ![Tony.V](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/tony.v/32/21437_2.png) [@Tony.V](https://community.trading212.com/u/Tony.V)\ **Post date:** [May 2, 2020, 11:44am UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/12 "2020-05-02T11:44:05Z")
@Ghua > [@Keep your account safe](https://community.trading212.com/t/keep-your-account-safe/5504/14): > > @tiberiu89 2FA is useful (and in our ToDo list, as you know already), yet using our Passcode lock + Face ID/Fingerprint will be even safer, I believe. Breaches, like the one mentioned above, are on email level and unrelated to us. So having an extra layer of protection on Trading 212 account level will keep you away from the risks. By the way, remember the posts about the limitation of available options upon withdrawal? Well precisely those strict AML precautions and internal procedures will g… ---
**Author:** ![AlinMC](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/alinmc/32/324_2.png) [@AlinMC](https://community.trading212.com/u/AlinMC)\ **Post date:** [May 2, 2020, 2:14pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/13 "2020-05-02T14:14:30Z")
I’m in the same boat. I created this thread a while ago, but still no implementation for this critical essential feature. I’m staying away from T212 until 2FA is introduced, very untrustworthy for a financial institution not to have it. ---
**Author:** ![Dao](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/dao/32/20739_2.png) [@Dao](https://community.trading212.com/u/Dao)\ **Post date:** [May 2, 2020, 5:13pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/14 "2020-05-02T17:13:53Z")
it’s not a requirement to be a financial institution. and just having a feature doesn’t guarantee your account is safer than before. it’s wanted, but not essential. I can can use just a password and by changing it every so often my account is just as secure as someone who doesn’t but adds an additional layer of security to their account. ---
**Author:** ![AlinMC](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/alinmc/32/324_2.png) [@AlinMC](https://community.trading212.com/u/AlinMC)\ **Post date:** [May 2, 2020, 6:31pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/15 "2020-05-02T18:31:11Z")
It is essential because it can make your account immune to brute force and keylogger malware, practices widely used. No matter how lengthy your password is or how often you change it, it’s very simple to lose your credentials to malware having infected your PC beforehand. If you take OS security seriously, have a good antivirus and keep all software updated you are doing great! But not everyone does this, for the average user it’s quite easy to get infected with keyloggers. Plenty of torrents, fake keygens, shady websites which can be bundled with such malware. You’re right, for now the best thing to do is have a lengthy password, regardless of complexity. Quick way to check password safety by length: [https://random-ize.com/how-long-to-hack-pass](https://random-ize.com/how-long-to-hack-pass) This topic doesn’t even need justification, every reputable online broker has 2FA so T212 is just getting left behind concerning security here… but I hope I am proven wrong soon 😉 ---
**Author:** ![Vedran](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/vedran/32/182_2.png) [@Vedran](https://community.trading212.com/u/Vedran)\ **Post date:** [May 2, 2020, 6:43pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/16 "2020-05-02T18:43:03Z")
If i was professional, I would definitely not target end users. Rather I would focus on employees of t212 to get access to whole infrastructure. Its like theft, pickpockets go for pennies, professionals go for millions. If i was targeting end user than I would go for email as this is basically key to all locks… But yea 2fa roxx. ---
**Author:** ![AleRi8](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@AleRi8](https://community.trading212.com/u/AleRi8)\ **Post date:** [May 2, 2020, 9:14pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/17 "2020-05-02T21:14:05Z")
if your that concerned use an on screen keyboard as a keylogger cannot determine where the user clicks! ---
**Author:** ![Vedran](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/vedran/32/182_2.png) [@Vedran](https://community.trading212.com/u/Vedran)\ **Post date:** [May 2, 2020, 9:24pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/18 "2020-05-02T21:24:32Z")
Anyway t212 promised 2fa, so it is in pipe. Will happen sooner or later. 😉 ---
**Author:** ![eu42](https://avatars.discourse-cdn.com/v4/letter/e/8baadc/32.png) [@eu42](https://community.trading212.com/u/eu42)\ **Post date:** [May 2, 2020, 11:17pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/19 "2020-05-02T23:17:43Z")
Having this feature is something while using it another. Not everyone should feel a necessity to use 2fa, but providing such an option is almost a must for a financing platform. As @Vedran said, it is already on the roadmap, so we hope to have this feature soon. ---
**Author:** ![AlexK](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/alexk/32/369_2.png) [@AlexK](https://community.trading212.com/u/AlexK)\ **Post date:** [May 3, 2020, 4:49am UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/20 "2020-05-03T04:49:34Z")
2FA will be released in May. ---
**Author:** ![Vedran](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/vedran/32/182_2.png) [@Vedran](https://community.trading212.com/u/Vedran)\ **Post date:** [May 3, 2020, 7:23pm UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/21 "2020-05-03T19:23:32Z")
> **[Nasty malware steals banking passwords and 2FA codes](https://www.komando.com/security-privacy/nasty-malware-steals-banking-passwords/737608/)** > > A newly discovered malware for Android can steal bank information, passwords and 2FA codes. Here's how it works, and how you can avoid running into it. Tru story ---
**Author:** ![Nirnaeth](https://dub1.discourse-cdn.com/flex013/user_avatar/community.trading212.com/nirnaeth/32/1633_2.png) [@Nirnaeth](https://community.trading212.com/u/Nirnaeth)\ **Post date:** [May 18, 2020, 9:16am UTC](https://community.trading212.com/t/why-no-two-factor-authentication/1169/22 "2020-05-18T09:16:32Z")
Any confirmation on this, please? Just had a random share added to my portfolio, which gave me a bit of a scare. Turned out to be a bonus share, but wasn’t clearly labelled. Made me realise there is a large amount of money in my portfolio and would appreciate an extra layer of security. [Next page](https://community.trading212.com/t/why-no-two-factor-authentication/1169.md?page=2)