topic Re: two-factor authentication can be bypassed. Please fix in Get Support

two-factor authentication can be bypassed. Please fix

marc_mib — Sat, 05 Nov 2022 00:03:52 GMT

It would be nice if they would have Google authenticator instead of my phone number or email for two-factor authentication. Because hackers last year got a hold of everything and it was very hard to fix everything they were able to get a public mobile SIM card and put the number on that SIM card and a locked me out of my email. I was able to get it all back because I know a little bit about computers and how the internet works. If anyone can suggest a better to factor authentication I would appreciate it. It takes forever to get the text or the email. Sometimes I have to do it several times because the time runs out with Google authenticator. All you need is to hold down the number and it'll copy it and then you paste it wherever you need it. If the hackers can do it to me then they can do it to anyone else. Please be aware.

Re: Why doesn't anyone want to help me fix my four digit PIN?

softech — Fri, 04 Nov 2022 23:11:06 GMT

@marc_mib

let me help you. I want to help

Just login to My Account

If you don't know the password, expand the Spoiler

1. For faster response (2-48 hours), use this direct link: https://publicmobile.ca/chatbot.

**Start with typing "Forgot Login Information", click "Contact Us", click "Click here to submit a ticket".

2. Or Private message to the CS Agent: https://productioncommunity.publicmobile.ca/t5/notes/composepage/note-to-user-id/22437

**Monitor your Community inbox (envelope icon on the top right) after the ticket is opened. CS Agent will reply to you there

once you are in , go to Profile page, click PIN from My Security Info box

https://selfserve.publicmobile.ca/en/account/my-profile/edit/security-information

Re: two-factor authentication can be bypassed. Please fix

softech — Sat, 05 Nov 2022 00:27:49 GMT

@marc_mib Authenticator app is definitely better and safer.

However, this is a server-client setup, it will cost PM extra to setup that. I am not sure many mobile carriers have it setup at this time. I doubt PM will invest extra for setting this up.

Re: two-factor authentication can be bypassed. Please fix

marc_mib — Sat, 05 Nov 2022 00:31:50 GMT

Maybe something else can be done to mitigate this problem.

Re: two-factor authentication can be bypassed. Please fix

gpixel — Sat, 05 Nov 2022 15:19:33 GMT

@marc_mib

I personally don't like 2fa even Google's authenticator app... if the hacker gains access to one's device, computer or Google account they are in big trouble. best thing to do is learn how to protect oneself.

create an email strictly for public mobile
change your name and address on your self serve account
don't use your personal email password for the pm website
don't use a password manager(chrome, safari, etc. browsers
don't use your cellphone number as a 2fa for banks, PayPal etc

Re: two-factor authentication can be bypassed. Please fix

lockup — Sat, 05 Nov 2022 21:39:08 GMT

Shouldn't cost PM anything extra to setup, since they don't use an in-house identity provider.

Correct me if I'm wrong, but don't they use Ping Identity ?

Since Ping probably has a 2FA product already, it shouldn't be too hard to turn on.