Anyone else's online bank account getting hard to log into?

[Leros]

I appreciate the security, but I am getting a little bit annoyed. It seems like every few weeks my bank account adds some extra layer of securuty.

Currently they ask for:
username
password
image verification
who i first went to prom with
major in college
place of birth

Its driving me nuts.

Edit: to be fair, they are removing old things as they add new things, but they still ask me for a 4 - 5 things every time I log on.

Edit2: Maybe it matters that every 2-3 weeks, I sign on from another city than I usually do.

 

[purbeast0]

mine has been the same for the 3 years i've been using online banking.

 

[FoBoT]

not mine

maybe i should be worried

 

[trmiv]

Yea I get the questions on mine now. The questions I get are random from some I apparently was asked when I opened the account. The other day it asked me what my favorite movie was and I was stumped for a good 15 minutes, I honestly didn't remember setting that one.

 

[AmpedSilence]

my ing acount is like that...

username
answer two questions
put in your pin

The "remember this computer" check box doesn't work on my computer. It's a bit annoying.

At some point the level "security" gets so bad that people will have to write stuff down. I know they have crazy password rules like 10+ characters, one symbol, one number, and a capital and lowercase number for a single password; oh, and don't forget you can't use the last 12 passwords you created and it must be changed every 60 days. That is point that people are going to write the password down, making all your rules completely useless.

 

[Agentbolt]

With Chase, if I try to log in from a different computer, I have to get sent a goddamned text message code and enter that in before they'll even let me put in my username password. It's like my account is a national secret or something.

 

[pstylesss]

I bank with WaMu and don't have to deal with that crap. BoA just started adding more "security" when I left them. They might as well just make you choose 5 passwords and you have to type them in order...

 

[effowe]

Originally posted by: Agentbolt
With Chase, if I try to log in from a different computer, I have to get sent a goddamned text message code and enter that in before they'll even let me put in my username password. It's like my account is a national secret or something.

Yeah that's the only annoying point. I am able to bypass it by getting an email and entering the additional code. They still only ask for login/pw, no extra security questions (once the computer has been verified.)

 

[Kaido]

Originally posted by: Leros
I appreciate the security, but I am getting a little bit annoyed. It seems like every few weeks my bank account adds some extra layer of securuty.

Currently they ask for:
username
password
image verification
who i first went to prom with
major in college
place of birth

Its driving me nuts.

Edit: to be fair, they are removing old things as they add new things, but they still ask me for a 4 - 5 things every time I log on.

Edit2: Maybe it matters that every 2-3 weeks, I sign on from another city than I usually do.

Yup mine just updated last month, it's about the same minus one or two steps.

 

[Dirigible]

Originally posted by: AmpedSilence
my ing acount is like that...

username
answer two questions
put in your pin

The "remember this computer" check box doesn't work on my computer. It's a bit annoying.

At some point the level "security" gets so bad that people will have to write stuff down. I know they have crazy password rules like 10+ characters, one symbol, one number, and a capital and lowercase number for a single password; oh, and don't forget you can't use the last 12 passwords you created and it must be changed every 60 days. That is point that people are going to write the password down, making all your rules completely useless.

More than one of my accounts have sites that refuse to remember my computer as well. It's more than a bit annoying.

And I'm ashamed to admit I'm already to the writing down passwords point.

 

[buck]

US Bank just wants username and Password.

 

[spidey07]

Your key is given to you in the form of a cookie. If you log on from another computer or delete the cookie you will have to re-authenticate yourself by answering the security questions.

 

[KB]

Mine has the extra security phrases, but it doesn't bother me. I actually remember what I entered.
Yeah if your bank isn't trying to add some extra security I would be worried.

 

[kranky]

I got very frustrated when one bank made me answer 3 questions from a list of 5, and there wasn't even 3 questions I could answer.

- First pet's name [I do not remember the name]
- Hospital where your father was born [How should I know?]
- Name of your prom date [we did not have a prom]
- Name of high school best friend [I hung with a group, there was no one "best friend"]
- Name of your elementary school [that one I could answer]

I decided at that point I would answer all security questions with the word "Swordfish" from then on. Now it's like I only have one security question, but they ask it many times and in many forms.

 

[Leros]

Originally posted by: kranky
I got very frustrated when one bank made me answer 3 questions from a list of 5, and there wasn't even 3 questions I could answer.

- First pet's name [I do not remember the name]
- Hospital where your father was born [How should I know?]
- Name of your prom date [we did not have a prom]
- Name of high school best friend [I hung with a group, there was no one "best friend"]
- Name of your elementary school [that one I could answer]

I decided at that point I would answer all security questions with the word "Swordfish" from then on. Now it's like I only have one security question, but they ask it many times and in many forms.

who do you bank with? is your username kranky?

 

[Kev]

Originally posted by: Leros

Originally posted by: kranky
I got very frustrated when one bank made me answer 3 questions from a list of 5, and there wasn't even 3 questions I could answer.

- First pet's name [I do not remember the name]
- Hospital where your father was born [How should I know?]
- Name of your prom date [we did not have a prom]
- Name of high school best friend [I hung with a group, there was no one "best friend"]
- Name of your elementary school [that one I could answer]

I decided at that point I would answer all security questions with the word "Swordfish" from then on. Now it's like I only have one security question, but they ask it many times and in many forms.

who do you bank with? is your username kranky?

lol

 

[Throwmeabone]

KeyBank is ridiculous. If you use a different computer or clear your cookies, you have to take out your debit card and type in all the digits and your PIN!

 

[D1gger]

I only get the "enhanced" security if I try to sign on using a computer I haven't used before or recently. Then I have to answer an additional security question (like what is my favourite pizza).

 

[spidey07]

Originally posted by: D1gger
I only get the "enhanced" security if I try to sign on using a computer I haven't used before or recently. Then I have to answer an additional security question (like what is my favourite pizza).

It's done that way on purpose, otherwise it isn't two factor authentication.

 

[imported_Lothar]

Originally posted by: kranky
I got very frustrated when one bank made me answer 3 questions from a list of 5, and there wasn't even 3 questions I could answer.

- First pet's name [I do not remember the name]
- Hospital where your father was born [How should I know?]
- Name of your prom date [we did not have a prom]
- Name of high school best friend [I hung with a group, there was no one "best friend"]
- Name of your elementary school [that one I could answer]

I decided at that point I would answer all security questions with the word "Swordfish" from then on. Now it's like I only have one security question, but they ask it many times and in many forms.

What if you don't remember "Swordfish"?

Don't remember password.
Can't answer the 5 questions because you used "Swordfish" for all of them.

Now what? They would probably have you to call customer support on the phone to verify your information which can be a hassle.


I like your way though...It has more security, no doubt.
No need to worry about family members or friends who know the answers to your personal questions trying to hack your account.

The worst are the "Where were you born?" or "What is your mother's maiden name?" type questions.
I can literally think of almost hundreds of people that know the answer to both questions.
If you add in "What was your high school mascot", that number reduces to about 50 people that know all three questions off head. That "50" figure doesn't include those who know the name, but don't know the mascot meaning they can easily drive by school or search google since they already know the name of the high school.

 

[tranceport]

username, password, 6 digit rsa key.

Works like a charm everytime.

 

[JulesMaximus]

Give me your account number, username and password and I'll try it out for you.

 

[her209]

Criminals would have to deposit money into my account in order to make it worth their while.

 

[spidey07]

Originally posted by: Lothar

Originally posted by: kranky
I got very frustrated when one bank made me answer 3 questions from a list of 5, and there wasn't even 3 questions I could answer.

- First pet's name [I do not remember the name]
- Hospital where your father was born [How should I know?]
- Name of your prom date [we did not have a prom]
- Name of high school best friend [I hung with a group, there was no one "best friend"]
- Name of your elementary school [that one I could answer]

I decided at that point I would answer all security questions with the word "Swordfish" from then on. Now it's like I only have one security question, but they ask it many times and in many forms.

What if you don't remember "Swordfish"?

Don't remember password.
Can't answer the 5 questions because you used "Swordfish" for all of them.

Now what? They would probably have you to call customer support on the phone to verify your information which can be a hassle.


I like your way though...It has more security, no doubt.
No need to worry about family members or friends who know the answers to your personal questions trying to hack your account.

The worst are the "Where were you born?" or "What is your mother's maiden name?" type questions.
I can literally think of almost hundreds of people that know the answer to both questions.
If you add in "What was your high school mascot", that number reduces to about 50 people that know all three questions off head. That "50" figure doesn't include those who know the name, but don't know the mascot meaning they can easily drive by school or search google since they already know the name of the high school.

This is the entire meaning of two factor authentication.

1) you provide username/password (single auth)
2) Site requests key (cookie, already given to your browser on whatever machine you have proven your second factor, you have the key). You no havie da key? This is the second factor authentication, something you have. You get challenged. PROVE your identity and now the single factor is put into a single auth only state.
3) I don't see why people are concerned about this. It's a good thing.

Otherwise I'll just capture your data on your wireless network, capture your cookies and log into your bank. Oh, but given I don't have the key that was originally exchanged upon authentication I must prove my identity. Identify yourself, you do not posses the key.

Two factor authentication.

 

[amdhunter]

Originally posted by: Agentbolt
With Chase, if I try to log in from a different computer, I have to get sent a goddamned text message code and enter that in before they'll even let me put in my username password. It's like my account is a national secret or something.