Proper two factor authentication

[ahnkle]

Why does Paypal not offer proper two factor authentication?

SMS does not count - it has been discredited and NIST now recommends it not be used anymore (https://pages.nist.gov/800-63-3/sp800-63b.html).

[lohierf]

Hello,

+1, I am adding my voice to raise this issue. The 2 factor authentication throught a TOTP app (and please, do not require users to install a proprietary app, we should be able to use any standard TOTP app) should be on Paypal's top priority list, especially since its main activity is handling people's money!

[Kirkoid]

Support for this. I live in an area of poor mobile/cell reception and have had to turn 2 factor off as the SMS messages can take an hour to arrive.

[consumer442]

PayPal needs to step up to the plate on this. SMS is not correct implementation of 2fa, as an option? Sure. As the *only* option? No! Security requires a key fob or an auth. app.