Unable to Set Up 2FA | Wealth One Bank of Canada | Discussion forum

Enrolling in the 2-step Verification login was simple & quick for me.

Along with 2FV, Wealth One Bank's login interface has been upgraded as well. I learned from my experience today this new interface accepts only numbers in the password and no more than 8 of those. I too could not log in - my password was more complex than that.

I called the help line and was advised to leave my name and number for a callback. Eventually I was called back and a new password was provided (8 numbers) and that allowed me to proceed with the login. Not surprisingly, I was required to create a new password before I could access my account. That went well and I was able to finally view my account. I decided to change the password again and made it longer - all numbers. I was advised my password had been updated. I logged off and tried to log in again but was advised once more that my password was not viable. Before calling in again, I logged in again but only entered the first 8 digits of the new password. It worked. This is where I learned about the password length limitation. Lucky guess.

I repeated the process with my spouse's account and all went well within the limitations of the login interface. We are now set up with 2FV and new passwords and have access to our accounts. Not sure about improved security of the limited password setup but it works.

Hope this helps explain why some had difficulty and others did not. If you have different information I would be interested to learn about it.

rodeworthy said
Along with 2FV, Wealth One Bank's login interface has been upgraded as well. I learned from my experience today this new interface accepts only numbers in the password and no more than 8 of those. I too could not log in - my password was more complex than that.

I called the help line and was advised to leave my name and number for a callback. Eventually I was called back and a new password was provided (8 numbers) and that allowed me to proceed with the login. Not surprisingly, I was required to create a new password before I could access my account. That went well and I was able to finally view my account. I decided to change the password again and made it longer - all numbers. I was advised my password had been updated. I logged off and tried to log in again but was advised once more that my password was not viable. Before calling in again, I logged in again but only entered the first 8 digits of the new password. It worked. This is where I learned about the password length limitation. Lucky guess.

I repeated the process with my spouse's account and all went well within the limitations of the login interface. We are now set up with 2FV and new passwords and have access to our accounts. Not sure about improved security of the limited password setup but it works.

Hope this helps explain why some had difficulty and others did not. If you have different information I would be interested to learn about it.  

My old password with letters & numbers worked yesterday and still works today.

I've fallen into the unrecognized password trap. My PW was only 7 numbers, so it looks like it doesn't satisfy the 8-char requirement. I've sent an e-mail message for them to contact me to resolve their issue.

Re-tried to log into the site and saw that I can ignore the 2FA for 11 days, or so. So, I choose that option and just log onto the site with my old 7-char PW and am successful. I then change the PW to an 8-char PW and log out.

I re-log onto the site and go through the 2FA setup rigamarole. I try to get W1 to send me authentication code via e-mail and get the same error message and to contact support. I do not want to use my mobile#, but enter it and am successful.

I then go to the Profile preferences to try and change it to e-mail authentication. (There is an option to do so.) "You can edit or delete your contact information below." Utter dishonest nonsense. There is no way to delete my cell#. I am only allowed to give them even MORE info via my e-mail address.

What a load of horsesh*t. I cannot believe they are so bad with their security implementation and hope that someone hacks the crap out of their system and cause a massive theft from them. They deserve what they get. Mickey Mouse wannabe bankers.

To watch them fail to implement such basic security features efficiently makes me cringe in fear for their overall casual approach to security. High school programmers would have found the glaring inadequacy of their process with the most basic and simplest tests.

HermanH said
I then go to the Profile preferences to try and change it to e-mail authentication. (There is an option to do so.) "You can edit or delete your contact information below." Utter dishonest nonsense. There is no way to delete my cell#. I am only allowed to give them even MORE info via my e-mail address.

W1 followed up with me this morning. I was able to remove my phone# from 2FA, but only after entering an e-mail address first. No explanation was given as to why my e-mail address was not accepted when first trying to activate 2FA. Oh, well. It works, now.

Also, CSR told me that 7-char password is acceptable.