Introducing two-step verification | Hubert Financial | Discussion forum

Please consider registering
guest

sp_LogInOut Log In sp_Registration Register

Register | Lost password?
Advanced Search

— Forum Scope —




— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

sp_Feed Topic RSS sp_TopicIcon
Introducing two-step verification
August 20, 2020
6:17 am
krwilson
Member
Members
Forum Posts: 123
Member Since:
March 15, 2019
sp_UserOfflineSmall Offline

"Two-step verification is now available for all Hubert members. This feature gives you an extra layer of security when accessing your Hubert account online through Hubert GO (app) and Hubert GO Web (desktop). If you plan to enable two-step verification through the app, please ensure it is updated before starting as this feature is only available with the most recent version of the app."

I just set it up and all is good. It also allows you to choose "remember this device" after setup and unlike Motive it actually works!

Hope all banking follows suit. (scotiabank has since the end of June)

August 20, 2020
11:06 am
Dean
Valhalla Mountains, British Columbia
Member
Members
Forum Posts: 732
Member Since:
January 12, 2019
sp_UserOfflineSmall Offline

krwilson said

"Two-step verification is now available for all Hubert members. This feature gives you an extra layer of security when accessing your Hubert account online through Hubert GO (app) and Hubert GO Web (desktop). If you plan to enable two-step verification through the app, please ensure it is updated before starting as this feature is only available with the most recent version of the app."

I just set it up and all is good. It also allows you to choose "remember this device" after setup and unlike Motive it actually works!

Hope all banking follows suit. (scotiabank has since the end of June)  

That third sentence is 'Very Important' ... Trust me ❗

LOL sf-laugh

    Dean

sf-cool " Live Long And Prosper " sf-cool

January 3, 2021
10:24 pm
Loonie
Member
Members
Forum Posts: 7405
Member Since:
October 21, 2013
sp_UserOfflineSmall Offline

I've been having a lot of trouble with the second step for the verification.
I have tried the secret question and the secret number email. I don't have a texting set-up.
More often than not, my verification is denied, even when they ask the same question and I give the same correct answer more than once. Right now I am locked out because of too many unsuccessful attempts - about four.
I don't know how to prevent this annoyance. I don't have this problem with other FIs.
Does anyone have any suggestions?

January 3, 2021
10:57 pm
mmlt
Member
Members
Forum Posts: 116
Member Since:
February 4, 2017
sp_UserOfflineSmall Offline

I had a similar experience recently. I decided to use the secret question route instead of my phone. Of course it didn't work. I needed to capitalize a letter when, normally, I use lowercase.

I don't know why they don't offer google authenticator or authy. Using these on a separate device offers great security.

January 4, 2021
7:08 am
Winnie
Ontario
Member
Members
Forum Posts: 353
Member Since:
December 7, 2011
sp_UserOfflineSmall Offline

With Hubert I only use the secret question, no texting or email set-up.
It works perfectly, absolutely no problems.
I like simplicity, only one choice for the second step for the verification.

January 4, 2021
9:38 am
Nehpets
Ontario
Member
Members
Forum Posts: 799
Member Since:
December 20, 2016
sp_UserOfflineSmall Offline

Loonie said
I've been having a lot of trouble with the second step for the verification.
I have tried the secret question and the secret number email. I don't have a texting set-up. .......  

The "secret question" component in two step verification is usually set up, in fact, to be a secondary password, that is, it must be entered precisely to match the original entry. Case sensitive and spelling accuracy. john and John and Jon are not the same.

Furthermore as identity theft is always a threat, it's best to use answers that do not reflect reality, so your father's middle name could be Zorro or Superman but not his real name.

This information should be stored in your password manager, preferably some kind of secure, password protected digital password manager, so you can copy / paste your responses, for absolute accuracy.

A negative comment on Hubert's two step verification is that their telephone verification will only text a response rather than including an option for a voice response. Some people still have landlines that do not support text or choose not to use text.

That being said, I have not had a problem with the "secret question" with Hubert, as I use the strategies I have described.

Happy New Year!

Stephen

January 4, 2021
9:54 am
Norman1
Member
Members
Forum Posts: 4337
Member Since:
April 6, 2013
sp_UserOfflineSmall Offline

mmlt said

I don't know why they don't offer google authenticator or authy. Using these on a separate device offers great security.

Security can be great. But, those often cost money.

The RSA SecurID tokens are another example. The six digit PIN changes every sixty seconds. PIN can only be used once, within a several minute time period. The former E*TRADE Canada used them.

Each SecurID token was about US$50 and was good for two years. If a financial institution had 10,000 clients, those would cost them US$500,000 every two years!

It depends on what the regulators require and how much losses those devices help avoid.

January 4, 2021
10:11 am
rhvic
Victoria, BC
Member
Members
Forum Posts: 393
Member Since:
May 28, 2013
sp_UserOfflineSmall Offline

Part of Hubert's two step verification I find laughable. I choose to use a secret question, to which I am supposed to put in the correct answer. But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. No other FI that I use which asks secret questions gives you a choice of answers!

I pointed this out to Hubert staff some months back, but they did not seem alarmed.

January 4, 2021
11:07 am
Norman1
Member
Members
Forum Posts: 4337
Member Since:
April 6, 2013
sp_UserOfflineSmall Offline

rhvic said
… But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. No other FI that I use which asks secret questions gives you a choice of answers!

I think it is your browser that has cached the answers to your questions.

There is no drop down menu for me to select an answer. I have to type in the answer to the question. I configured my browser to not remember passwords or answers to questions.

January 4, 2021
11:25 am
rhvic
Victoria, BC
Member
Members
Forum Posts: 393
Member Since:
May 28, 2013
sp_UserOfflineSmall Offline

Norman1 said

rhvic said
… But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. No other FI that I use which asks secret questions gives you a choice of answers!

I think it is your browser that has cached the answers to your questions.

There is no drop down menu for me to select an answer. I have to type in the answer to the question. I configured my browser to not remember passwords or answers to questions.  

If this is an issue with the Opera browser, then it is only doing it for Hubert - about 5 other FIs I use do not offer me a list of answers to choose from.

January 4, 2021
12:11 pm
Dean
Valhalla Mountains, British Columbia
Member
Members
Forum Posts: 732
Member Since:
January 12, 2019
sp_UserOfflineSmall Offline

rhvic said

Part of Hubert's two step verification I find laughable. I choose to use a secret question, to which I am supposed to put in the correct answer. But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. . . .

The Exact same thing is happening to me ❗ sf-confused

My browser is 'Google Chrome'. I'll have to somehow figure out how to stop this from happening, but I have no idea how its done.

Anyone have suggestions ❓

Thanks,

    Dean

sf-cool " Live Long And Prosper " sf-cool

January 4, 2021
12:33 pm
Dean
Valhalla Mountains, British Columbia
Member
Members
Forum Posts: 732
Member Since:
January 12, 2019
sp_UserOfflineSmall Offline

Dean said

rhvic said

Part of Hubert's two step verification I find laughable. I choose to use a secret question, to which I am supposed to put in the correct answer. But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. . . .

The Exact same thing is happening to me ❗ sf-confused

My browser is 'Google Chrome'. I'll have to somehow figure out how to stop this from happening, but I have no idea how its done.

Anyone have suggestions ❓

Thanks,

    Dean

  

Well, though I'm not the sharpest tool in the shed sf-wink ... I've already figured
this out ❗

Turns out, all I had to do is disable the Autofill for Addresses in my Google Chrome browser.

All's Well That Ends Well,

      Dean sf-smile

sf-cool " Live Long And Prosper " sf-cool

January 4, 2021
1:06 pm
smayer97
Member
Members
Forum Posts: 453
Member Since:
September 29, 2017
sp_UserOfflineSmall Offline

It is STILL a Hubert programming problem... developers can block what data a browser can cache, and most FIs block any security related data from being cached.

January 4, 2021
2:18 pm
Dean
Valhalla Mountains, British Columbia
Member
Members
Forum Posts: 732
Member Since:
January 12, 2019
sp_UserOfflineSmall Offline

Dean said

Well, though I'm not the sharpest tool in the shed sf-wink ... I've already figured this out ❗

Turns out, all I had to do is disable the Autofill for Addresses in my Google Chrome browser.

All's Well That Ends Well,

      Dean sf-smile

      

smayer97 said

It is STILL a Hubert programming problem... developers can block what data a browser can cache, and most FIs block any security related data from being cached.  

Actually, you're Right ⬆ ... the Hubert/Sunova programing developers should be blocking the browser cache.

And I have quickly realised that my Bandaid Remedy of disabling the Autofill for Chrome, is a Real Pain in the A$$. All my Autofill is now disabled ... even the legit ones.

Hubert/Sunova is Failing us Again ❗

Not happy about this sf-confused

    Dean

sf-cool " Live Long And Prosper " sf-cool

January 7, 2021
11:13 am
Dean
Valhalla Mountains, British Columbia
Member
Members
Forum Posts: 732
Member Since:
January 12, 2019
sp_UserOfflineSmall Offline

Dean said

Actually, you're Right ⬆ ... the Hubert/Sunova programing developers should be blocking the browser cache.

And I have quickly realised that my Bandaid Remedy of disabling the Autofill for Chrome, is a Real Pain in the A$$. All my Autofill is now disabled ... even the legit ones.

Hubert/Sunova is Failing us Again ❗

Not happy about this sf-confused

    Dean

  

I just got off the phone with a Hubert CSR . . .

I explained the problem/concern to her about Hubert's 2 Factor Authentication (2FA) (a.k.a. Two-Step Verification) sign-in process, not blocking people's Autofill Browser Cache.

At first she quickly said I could easily solve this problem, by turning off the Autofill function on my computer (implies that I wasn't the first person to call about this). But when I told her that I didn't want to do that, and that Hubert is the only FI that allows Autofill to work on their 2FA, she quickly backtracked.

I went on to say that this is potentially a rather serious security problem, and that Hubert's website programers should fix this as soon as possible. She agreed, and said she would refer this matter to their IT Dept.

Call me a sceptic, but I'm guessing little to nothing will really be done about this, until a lot of people complain to Hubert/Sunova.

Time will tell ...

    Dean

sf-cool " Live Long And Prosper " sf-cool

January 7, 2021
2:40 pm
rhvic
Victoria, BC
Member
Members
Forum Posts: 393
Member Since:
May 28, 2013
sp_UserOfflineSmall Offline

Thanks Dean. I was one of the earlier callers to them about this, when they first introduced this method. Let's see if they change anything.

January 7, 2021
9:20 pm
Loonie
Member
Members
Forum Posts: 7405
Member Since:
October 21, 2013
sp_UserOfflineSmall Offline

Thanks for feedback.
I left Hubert alone for two days, at which time I was able to login again. I never phoned them.
To my mind, a lockout that goes away on its own suggests a problem with the FI's systems rather than at my end.
Spouse reports similar intermittent problems.

January 9, 2021
11:30 am
Dean
Valhalla Mountains, British Columbia
Member
Members
Forum Posts: 732
Member Since:
January 12, 2019
sp_UserOfflineSmall Offline

Dean said

I just got off the phone with a Hubert CSR . . .

I explained the problem/concern to her about Hubert's 2 Factor Authentication (2FA) (a.k.a. Two-Step Verification) sign-in process, not blocking people's Autofill Browser Cache.

At first she quickly said I could easily solve this problem, by turning off the Autofill function on my computer (implies that I wasn't the first person to call about this). But when I told her that I didn't want to do that, and that Hubert is the only FI that allows Autofill to work on their 2FA, she quickly backtracked.

I went on to say that this is potentially a rather serious security problem, and that Hubert's website programers should fix this as soon as possible. She agreed, and said she would refer this matter to their IT Dept.

Call me a sceptic, but I'm guessing little to nothing will really be done about this, until a lot of people complain to Hubert/Sunova.

Time will tell ...

    Dean

  

rhvic said

Thanks Dean. I was one of the earlier callers to them about this, when they first introduced this method. Let's see if they change anything.  

Sadly ... it doesn't look like they will, Rhvic.

This has been a known, ongoing security issue at Hubert for almost 5 Months now, and there's Still no sign of them doing anything about it ❗

It's very 'HickBilly', if you ask me. sf-confused

    Dean

sf-cool " Live Long And Prosper " sf-cool

May 20, 2021
11:33 am
Dean
Valhalla Mountains, British Columbia
Member
Members
Forum Posts: 732
Member Since:
January 12, 2019
sp_UserOfflineSmall Offline

rhvic said

Part of Hubert's two step verification I find laughable. I choose to use a secret question, to which I am supposed to put in the correct answer. But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. No other FI that I use which asks secret questions gives you a choice of answers!

I pointed this out to Hubert staff some months back, but they did not seem alarmed.  

For me (using Google Chrome), that ⬆ problem with Hubert's 2SV (re: "Answer One Of My Security Questions") has now Finally been fixed. Their 2SV system now blocks AutoFill, so now you have to type in the answers manually ... as it should be ❗

It's Absolutely Ridiculous how Long it took Hubert to fix this security problem with their 2SV. sf-confused

    Dean

sf-cool " Live Long And Prosper " sf-cool

Please write your comments in the forum.