I was excited about PayPal releasing a two factor auth system for account access. I spent the $5 and ordered one. I have a soft spot for responding to random emails asking for my PayPal account info. I thought with a device such as this I would no longer have to worry about which email asking me to verify my account details I needed to respond to. I got my slick looking security token today, went to the website and set it up. Now when logging in I am asked for the 6 digit number on my token.
Here is the rub: it doesn’t work. When I enter the number I get an error message telling me to check the value and try again. You can still login in but you have to do something like use your entire bank account number as authentication. I deactivated it an setup it up again 3 different times and still no joy. If I can’t get it working I have no idea what mom-and-pop user are suppose to do. Of course I freely admit this may be an error on my part, although I followed the instructions step-by-step 3 different times.
Here is the rub: it doesn’t work. When I enter the number I get an error message telling me to check the value and try again. You can still login in but you have to do something like use your entire bank account number as authentication. I deactivated it an setup it up again 3 different times and still no joy. If I can’t get it working I have no idea what mom-and-pop user are suppose to do. Of course I freely admit this may be an error on my part, although I followed the instructions step-by-step 3 different times.
Bad PayPal, no cookie.
UPDATE: Alot of people missed my sarcastic post here. I really don't repsond to emails asking form my paypal details and I know that two actor auth won't stop a real time phisihing attack.
