2FA - Authy or Google

[hidef888]

Will paypal ever get away from the terrible SMS 2FA and use something like  Authy or Google Authenticator?

[Oregon11]

@hidef888

In addition to their SMS Security Key, PayPal also offers Verisign VIP Access 2FA in some countries.

Here is a Symantec link with details on Verisign VIP Access and the PayPal link needed to sign up if its available for your account.

https://vipmobile.verisign.com/

https://www.paypal.com/us/cgi-bin/webscr?cmd=_setup-security-key

[FaultyPull45]

This is not an answer, but I have the same issue

Especially in the wake of the recent Reddit hack. They gained access to employee accounts that had 2FA enabled, but the 2FA code was intercepted because they were using SMS for 2FA. I've heard that after enabling the Norton 2FA app, it still gives you the option to use SMS OR the app when signing in. Please give us support to turn off SMS 2FA and use only app 2FA.

[timvs]

No security manager worth their salt would advise you to use SMS based 2FA. It's an absolute joke that this is the only form available and just goes to illustrate that PayPal are long since being a technologically competent business.

[Ova77]

To all the people interested in the security of our Paypal accounts, please create an official support case for Paypal to listen to us and take action on the matter.

Follow the following link: https://www.paypal.com/smarthelp/contact-us

And on the lower right side, you have the option to send an email to the official Paypal support.

We'll claim the 2FA - Authy or Google (or similar) so that we have additional security in our accounts as soon as possible.

The union will make strength. They should listen to us.

-Thank you.

[Spawnandjesus]

---

@Oregon11 wrote:

@hidef888

In addition to their SMS Security Key, PayPal also offers Verisign VIP Access 2FA in some countries.

Here is a Symantec link with details on Verisign VIP Access and the PayPal link needed to sign up if its available for your account.

https://vipmobile.verisign.com/

https://www.paypal.com/us/cgi-bin/webscr?cmd=_setup-security-key

---

According to Firefox, VeriSign has improperly configured their SSL Certificate. The connection is not secure.

Error code: SSL_ERROR_BAD_CERT_DOMAIN

[apoggee]

May I know why PayPal do not support 2FA like using Google Authenticator, Authy, Microsoft Authenticator?

Currently the only 2FA that we get is via the temporary password send to our mobile number.

When is PayPal going to implement 2FA that allow us to use Google Authenticator, Authy, Microsoft Authenticator?

A

[kernowlass]

@apoggee

Ask them?

[Kevinsky86]

Is there any roadmap on when Paypal will support methods other then SMS and the hardware token as 2 factor mechanisms?

I'm having huge problems with Paypal's SMS messages not getting delivered to my provider and Paypal nor my provider claim to be able to solve this issue even though I've been trying to get them to actually look at the problem for weeks.
So considering that this issue is not going to be solved, and considering SMS 2 factor has become a matter of debate anyway, is there any light on the end of the tunnel for other widely used 2factor mechanisms? Such as Google Authenticator/Authy?
Having no two factor authentication on a payment service is highly undesireable as far as I'm concerned and Paypal seems to be lagging behind on this.

[raharja]

Is there any plan for PayPal to support 2FA using Google Authenticator or Authy? Using SMS is very insecure as we might change phone number and our old number could fall into wrong hands.