Two-factor authentication limited to cell phones with no option to received code via e-mail?

Forum|Forum|4 years ago
January 6, 2022
4 replies
38 views

It appears that the only ProSeries options for two-factor identification are through cell phones. What if my cell phone is dead, missing, etc. Intuit should include an e-mail option to the e-mail address on record like they do when signing on to this site. Until there is an option for more than a single device I will wait to opt in.

ProSeries Professional

This topic has been closed for replies.

dkh

Level 15

You have a choice of Text Message, Voice call verification or Google Authenticator

so that's not limited to cell phones

Solved: Upgraded Login Security Recommendation for Tax Yea... - Intuit Accountants Community

D

dbarberiAuthor

Level 3

Correct me if I am wrong, but isn't Google Authenticator currently limited to mobile devices? So don't I still need a cell phone to use ProSeries two-step authentication?

dkh

Level 15

Sorry - I had no idea what Google Authenticator was.....

B

Brian_Christian

Level 5

Any phone line should do. In My Account you can choose how to verify, text message or voice call.

D

dbarberiAuthor

Level 3

Brian: As indicated in the string above, like many these days I have no land line, only cell phone. So, as I understand it, under Intuit's two-factor authentication, I would be locked out if I experienced any problem with my cell line (lost phone, needs charge, cell tower issues, etc. etc.) Adding e-mail as an option for authentication, as is the case nearly everywhere else, would solve this.

B

Brian_Christian

Level 5

My apologies, I think I misunderstood your original post.

Just so you know, 2 factor authentication would not include email as that would only be something you know along with your password (something else you know). So two things you know is a single factor. The second would need to be something you have e.g. your phone/key fob, or something you are e.g. eye or fingerprint.

That's is why you don't see email as an option in MFA (multifactor authentication).

I realize other companies may provide a way to do this with email, but it is not considered secure enough to qualify as MFA. Intuit has to follow the guidelines the IRS provide in this matter.

See https://www.irs.gov/privacy-disclosure/multi-factor-authentication-implementation for more information concerning these requirements if you're interested.

Unfortunately our current solution is limited in this configuration.

Regards

Brian