2-step verification (MFA) does not always get triggered | Oaken Financial | Discussion forum

Hi,

My spouse signed up for an Oaken HISA account last week.

She immediately enabled two-step verification so that a verification code would be sent by SMS whenever a login attempt is made. Afterward, she tested the feature using different laptops and internet connections.
However, she was not consistently prompted to enter a verification code when signing in.
On one occasion, she was asked for a code, but instead of entering it, she returned to the login page and signed in again using her credentials. She was then able to access the account without completing the two-step verification process.

She has already raised this concern with Customer Service, as this pattern could present a security risk.
As an additional security measure, she has enabled email notifications for account logins. (So that she gets an email each time a login is made)

Are there any other steps you would recommend to further improve the security of the account?
Thank you.