“Once they gain access to the number, they can try to access the user’s online accounts by performing password resets and receiving the OTP codes to get past multi-factor authentication.”
Mint - “Can’t bypass multi-factor authentication when you never implemented multi-factor authentication!”
Not sure when they added it but immediately after seeing this post I hit my account to change my password and confirmed Mint does offer 2FA using auth apps (I used Google Authenticator) so I activated it.
I expect this to replace the SMS codes they’d been sending me before and hopefully prevent what you’re describing.
Would be nice if these big firms would stop serving us the breach du jour.
“Once they gain access to the number, they can try to access the user’s online accounts by performing password resets and receiving the OTP codes to get past multi-factor authentication.”
Mint - “Can’t bypass multi-factor authentication when you never implemented multi-factor authentication!”
Not sure when they added it but immediately after seeing this post I hit my account to change my password and confirmed Mint does offer 2FA using auth apps (I used Google Authenticator) so I activated it.
I expect this to replace the SMS codes they’d been sending me before and hopefully prevent what you’re describing.
Would be nice if these big firms would stop serving us the breach du jour.