@CountyDownIeUk
If it's good enough for my bank then it satisfies my need for security. I have a good memory and I don't choose the obvious questions but rather humour to remember security questions. The same goes for usernames.....combined together it makes it nearly impossible for a "stranger" to access your account and pretty much renders the possession of the phone or Sim card useless to actually access an account using these measures.
Public mobile didn't implement 2FA to make our accounts more secure.....in fact it made them less secure from a criminal standpoint and harder to access for customers either suspended or without email access or both?!! Changing to 2FA and adding the ability to reset your 4 digit account PIN # to our self serve accounts made it more convenient for customers who have forgotten their security details and have not done due diligence to have a back up plan for that info.
Now the 4 digit account PIN# that is our accounts security key can be reset by anyone with account access. Public Mobile also eliminated another secret verifier when they overhauled the activation portal and removed the birthdate question. That info was inaccessible from the customer side but an important verifier that a customer knows the correct date (unless they lied about their age at activation?!!) when they may not know their email, password or 4 digit account pin # but they know their age/birthday.
