# Call for Industry standard 2FA

**URL:** <https://community.investengine.com/t/call-for-industry-standard-2fa/2103>\
**Category:** General\
**Created:** [7 January 2025 15:20 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103 "2025-01-07T15:20:10Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![CalmEddie](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@CalmEddie](https://community.investengine.com/u/CalmEddie)\
**Post date:** [7 January 2025 15:20 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103/1 "2025-01-07T15:20:10Z")

</div>

Your help page has declared that you will implement 2FA via SMS for months now, with no progress.

I will not install your app for this. I only allow world-class organisations such as google or Microsoft to handle security matters on my phone. Maybe eventually you will rank to that level, but until then insisting on a home grown app is poor.  
I am not interested in the other features your app may have.

The alternative industry standard is to use SMS, which all the other banks use.

I’m sure we customers would welcome an official response that InvestEngine take security more seriously.

---

<div class="post-metadata">

**Author:** ![Anastasia](https://avatars.discourse-cdn.com/v4/letter/a/e9a140/32.png) [@Anastasia](https://community.investengine.com/u/Anastasia)\
**Post date:** [8 January 2025 14:35 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103/2 "2025-01-08T14:35:37Z")

</div>

Hello!

Currently, you can download the app, set up 2FA and then you will be able to use 2FA via SMS. After that, you won’t need to use an app for 2FA.

If you have any questions or require any further assistance, please do not hesitate to reach out to us via email [support@investengine.com](mailto:support@investengine.com)

---

<div class="post-metadata">

**Author:** ![CalmEddie](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@CalmEddie](https://community.investengine.com/u/CalmEddie)\
**Post date:** [14 January 2025 12:10 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103/4 "2025-01-14T12:10:09Z")

</div>

Thank you for the indication this is possible.

For me to have confidence in apps, the workflow needs to be flawless. Although I got this to function, it is not flawless.

The following is missing from the help pages, posting as it might help others.

After installing the app, and setting up.

 ![Screenshot_2025-01-14-11-29-43-02_8bab01b1b080d7e5d424c535b60cd890](https://europe1.discourse-cdn.com/flex017/uploads/investengine/original/2X/c/c410af71bf222bfd6bf8c27946e3b03c44bed7f6.jpeg)

---

<div class="post-metadata">

**Author:** ![CalmEddie](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@CalmEddie](https://community.investengine.com/u/CalmEddie)\
**Post date:** [14 January 2025 12:10 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103/5 "2025-01-14T12:10:46Z")

</div>

The web site login will then send 2FA authorisation requests to the app on the phone. I can find no option to default this to SMS, instead a workaround is necessary.

Click “Didn’t receive” to access the SMS screen, each time you want to log in via 2FA…

 ![Untitled](https://europe1.discourse-cdn.com/flex017/uploads/investengine/original/2X/b/b6ae033bdb6fa66236beb9730989a53ad492ec32.png)

---

<div class="post-metadata">

**Author:** ![CalmEddie](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@CalmEddie](https://community.investengine.com/u/CalmEddie)\
**Post date:** [14 January 2025 12:11 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103/6 "2025-01-14T12:11:38Z")

</div>

This gives the option…

 ![Untitled 2](https://europe1.discourse-cdn.com/flex017/uploads/investengine/original/2X/c/ca6a962645417170e28d173f6937df34be345c88.png)

The need to perform a workaround every time feels like a lack of transparency.  
It’s OK I suppose, but what further undermines confidence is that when I repeated the workflow to test it, I found a bug…

---

<div class="post-metadata">

**Author:** ![CalmEddie](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@CalmEddie](https://community.investengine.com/u/CalmEddie)\
**Post date:** [14 January 2025 12:12 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103/7 "2025-01-14T12:12:40Z")

</div>

Now that 2FA is enabled, I logged out of the app and then logged in to it again.  
And found that the app required me to pass 2FA to log into the app, by sending a 2FA to the app that I’m trying to log in to.

 ![Screenshot_2025-01-14-11-46-15-82_8bab01b1b080d7e5d424c535b60cd890](https://europe1.discourse-cdn.com/flex017/uploads/investengine/original/2X/1/1a4ef5e9d91908ae088b6529925fbd139d8fea52.jpeg)

This could be better. No guesses should be necessary.

(Apologies for multiple replies, I could only attach 1 image per post).

---

<div class="post-metadata">

**Author:** ![fionagraham](https://avatars.discourse-cdn.com/v4/letter/f/5f8ce5/32.png) [@fionagraham](https://community.investengine.com/u/fionagraham)\
**Post date:** [15 January 2025 11:48 UTC](https://community.investengine.com/t/call-for-industry-standard-2fa/2103/8 "2025-01-15T11:48:41Z")

</div>

Hi @CalmEddie - thanks for this! I’ve passed it on to the team to have look through.
