Tangerine - Two step authentication | Page 2 | Tangerine Bank | Discussion forum

pooreva, I have a pay-as-you-go phone with one of the pay by the minute plans (for voice calls) which I just never use so my monthly bill is zero, then I add the $5/month text add-on plan. I use my home landline for voice calls, if a voice call comes to my cell I just don't answer. So this would work for those who want to provide a cell number for banks, etc to text to.

The Telcos in Canada have succeeded in weaseling their way around every CRTC attempt to lower consumer costs. In most cases, the CRTC orders have been recognized as useless (like bundling/unbundling, "Skinny Basic" et al) even before they were implemented. I expect the same to happen with the supposed orders to lower rates AND the new auctions to local/regional carriers wanting to resell access from the biggies. Remember how all the supposedly competitive new carriers all got sold to the big buillies in short order?
RetirEd

You might be right, Alexandre, good to know this might no longer be available so I'll doubly make sure to resist their messages to go on a monthly plan. I never did go a plan as far as I remember, all I know is I activated a phone with Rogers and bought a $100 prepaid voucher to give me a year's service at the same time, being charged against my $100 by the minute and by the text. Then I added the $5/month text package once my text usage rocketed from sending maybe 3 texts a month to sending about 20, as I do now. I notice when I sign in to my account it does say I'm on "Talk All Day" plan.

So does this mean if I change phones (one of my kids has offered me a castoff 5 year-old android smartphone) and need a new SIM card from Rogers (apparently my old one won't fit the new phone, he says) then I can't transfer this grandfathered plan to my new phone? If so forget it, I'm keeping my old phone.

Thanks, Alexandre, for the detailed procedure, I'll do that. And now that you mention all this I think this happened when my wife got her new phone a few years ago, we went to Rogers store and they put a new SIM card in her new phone and she stayed on the same plan. Guy told us a new SIM card was $10, we said sure, but then he ended up not charging us, he said his personal policy was only to charge people who he felt were angling for a free SIM card, pretty funny!

Adam1 said

I checked the app, mobile site and on my computer, but can't find the option after going through every one of the settings. There's the option for "double safe secure login" which is for security questions (always been there) and "security" for changing the 6 digit login pin. Other than that, the only login settings I see are for authorized devices using the app for biometric sign in. I don't specifically see a "security & login" option after clicking my name. I see: profile and settings / devices / documents / forms / log out.

I'm still seeing this message too: "Wondering where your picture and phrase are?
We're adding some new enhanced security features and have decided to discontinue the picture and phrase."  

kelbee said

Like adam1, I just see profile and settings / devices / documents / forms / log out. This makes me think it is a phased rollout. You can't do it until you get the email.  

.

Hmmm

After signing in and then clicking on my name at the top of the page, I see six (6) selections :

Profile & Settings
Devices
Security & Login
Documents
Forms
Logout

After clicking on Security & Login, I see three main sections to make edits:

- Login Details
- 2-Step Authentication
- Secret Questions and answers

I guess I must be 'Special'.

Dean

.

P.S.
I don't know if it makes any difference,
but I'm using a PC and Google Chrome.

I've confirmed with Tangerine that it's a pilot project available to clients who received the email about it, and will be available to everyone else soon as an option to log in.

It's very likely to not be mandatory, but it's possible that security questions might not be an option in the future for new clients. My old apple id I don't use anymore still has security questions set up, but my main apple id only has the option for 2fa codes.

They should have more options than only text message codes, though:

- automated voice call to receive codes
- backup phone number
- qr code to set up authenticator app
- push notifications to a trusted device
- recovery/backup codes
- physical/bluetooth security key
- windows hello, biometrics, etc.

Righand said

. . .

If I am ever forced to use a cell phone at Tangerine I will have no choice except to cancel all my accounts and credit card.  

I don't think we have much to worry about ... 2SA with a cell phone will probably always be Optional.

A few of the reasons :

- Every cell provider has dead zones (i.e. areas of no reception)
- Not everyone has/uses a cell phone (believe it, or not )
- Cell phones are 'battery dependent'.
- Some rural folks (like me) don't have cell reception at home.

I'm a big fan of 2SA, but there are other ways to accomplish it.

Dean

Fixed answers to a few security questions are not that more secure.

If the password can be captured as it is typed, then each of the answers can be captured as well as each is typed.

Bill - about mobile phone SIMs: they are all (as far as I know - there may be exceptions somewhere) alike except for coming in 3 physical sizes. The larger ones can be cut down to fit smaller slots without damaging the chip inside, or the smaller ones fitted into a bezel to fit the larger slots.

New SIMS mostly are snap-out 3-stage ones. They fit the large size, but you can snap out the small centre or the small centre with the medium bezel around it. If you want to put an existing small SIM in a larger slot, pop by a phone shop. They will have a wastebasket full of the bezels from SIMs they put into newer phones with the smallest size slot.

If you change providers, though, you will need a new SIM.
NewEd

Norman1 said

Fixed answers to a few security questions are not that more secure.

If the password can be captured as it is typed, then each of the answers can be captured as well as each is typed.  

So True ⬆ ... especially when using unsecured, or undersecured devices. Keylogger Viruses have been around for quite some time now.

As for myself, the only device I use for Anything financial/sensitive is my desktop PC, which is protected with with high-end Internet Security software (i.e. 'Bitdefender Total Security').

When on the internet, you just Can't be too careful ❗

Dean