Originally posted by: spidey07
It's not a trend. It's a requirement from the federal government.
The HAVE to use two factor authentication. I think it's great.
that's not two factor...any bank or financial institution thinking asking for a password and someone's favorite color is 2 factor autheitication needs to send their IT folks to training.
a factor =
1. something you know: password, the street you lived on, your mother's maiden name
2. something you are: finger print, iris scan
3. something you have: security token, bingo card
In order for the authentication to be 2 factor, they need to implement 2 different things from the above, not 2 of the same things.
me personally, I like 2 factor, 2 way authentication. this way, not only does the financial institution authenticate you and make sure you are who you say you are, but it also authenticates itself to the customer. Everyone implements multi-factor authentication to fight against Phishing and the only way to do that is with 2 way authentication.
they're headed in the right direction, but asking me for a password and my fav. high school teacher's name is the same thing as asking me for two different passwords, and that's not really secure at all.