QF trialling two-factor authentication for QFF accounts

[trippin_the_rift]

More than you might think!

Bank auth while overseas isn't the best experience. I don't know about you but I have about 10 of those tokens. One recently had the battery die. It sucks.

Furthermore it makes sense to only require 2FA if using points/change or cancel flight or updating account details.

 

[nlagalle]

SMS is old school for 2FA, using a softoken is much better and probably cheaper too

 

[moa999]

SMS is old school for 2FA, using a softoken is much better and probably cheaper too

While I agree.
Plenty more issues with support of soft-token apps, many may not have good enough phones or struggle to install apps, whereas almost anyone can receive a text

 

[samh004]

I'd love to use this. Could have saved me a lot of drama a couple years ago.

 

[sudoer]

Hopefully they give users the option for TOTP (e.g. Google Authenticator) or emailed codes as a backup also. SMS 2FA is already considered insecure - although probably secure enough to fend off hackers chasing points - and as mentioned lots of travelers aren't be able to receive SMSes while abroad.

In a perfect world they would build a hardware token into Q tags, my thoughts anyway

 

[QF WP]

TGFT (Thank God for that!). I'm not fussed as it's only a trial, however I just want something that will work wherever I am. Anything that beefs up security whilst maintaining usability is fine.

 

[Jet L]

Dont know if this has been said but if they make it like CommBank and you have a choice to either have the code come through the app or text message.. Also Google Authenticator would work well to

 

[wandering_fred]

I have overseas roaming precisely because I can receive SMS free. A two SIM phone means I can use the local SIM to reply (with usually very much cheaper calls and SMS - eg SriLanka). Failing that Skype works for the calls.

I would support a second check of some sort for anything requiring "changes" to the account or reservations.

Happy wandering

Fred

 

[Hvr]

Another good thing to have would be a list of previous log ins (including unsuccessful attempts) so the member can see if there is any potential risk to their account.

 

[harvyk]

Possibly. But how often do you need to access you QFF account whilst overseas?

Every single trip. Usually I'll do a seat check at T-80 to confirm I still have the best seat in the house. That said, I also typically have my mobile with me with global roaming, so SMS's are not a problem.

 

[coriander]

Given many members are always overseas travelling, SMS isn't the brightest idea.

With Netbank, CBA sends the six-digit authentication code to your smartphone app as well as an SMS, so as long as you have internet (wifi or 4G) you'll immediately get the number irrespective of where you are in the world.

 

[Pushka]

It seems I've been selected for the trial. Multiple times yesterday I received a text and had to insert the texted number to log in. It did suggest there was an alternate if the associated phone wasn't handy. NAB introduced a similar scheme, without notice a few years ago while we were overseas. It impacted awfully on our business including processing payroll. Had to pay a lot of $ to call them direct to sort it out.

 

[Pushka]

Just thinking. This would be a pain in the butt as I often make bookings for MrP via his account. I wouldn't be able to do this in future.

 

[mviy]

Yes, this is going to complicate things a lot.

 

[snabbu]

It seems I've been selected for the trial. Multiple times yesterday I received a text and had to insert the texted number to log in. It did suggest there was an alternate if the associated phone wasn't handy. NAB introduced a similar scheme, without notice a few years ago while we were overseas. It impacted awfully on our business including processing payroll. Had to pay a lot of $ to call them direct to sort it out.

Unless the messages come as IMessages I hope I'm not selected as I'm in an Australian location with zero phone reception.

 

[greyyy]

Given many members are always overseas travelling, SMS isn't the brightest idea.

Also given they're adding wifi to flights... where you won't be able to receive SMS. This really doesn't sound like a decision that was thought out properly.

 

[mviy]

If I get selected I'll probably ring up QANTAS and give my 2 cents.

 

[Pushka]

Unless the messages come as IMessages I hope I'm not selected as I'm in an Australian location with zero phone reception.

Unfortunately I deleted them and can't retrieve them

 

[GoldCanyon340]

I've been selected this week and, of course, all this week I've needed to research/book multiple award flights (isn't that always the case?!)

I've not been able to use the 'book flights' option in the iPhone app since, it just hangs with a busy icon.

 

[Pushka]

I've been selected this week and, of course, all this week I've needed to research/book multiple award flights (isn't that always the case?!)

I've not been able to use the 'book flights' option in the iPhone app since, it just hangs with a busy icon.

So that was what has happening to me too. It said it was already processing a booking? It wasn't. Then it was doing other weird stuff. Ok on the PC once I'd entered the text code.