<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do I disable SMS authentication completely, but leave two-factor authentication enabled? in Get your taxes done using TurboTax</title>
    <link>https://ttlc.intuit.com/community/taxes/discussion/re-how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/2911871#M1063006</link>
    <description>&lt;P&gt;Thank you for the response. This is the exact behavior I wish to remove. Signing in with a text message might be okay for a casual games website or social platform, but is grossly inappropriate for websites that collect, store, process, and display extremely sensitive and valuable financial data.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Did you know that SMS Authentication is illegal for banking websites in some countries?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This website does have actual 2FA (code generator app) capability. I had to use it to sign in to write this reply. There is no good reason for me to fall back to text messages. SMS is the weak link in a strong chain; being able to bypass my code generator with a text message is not acceptable security and makes everyone more vulnerable.&lt;/P&gt;</description>
    <pubDate>Sat, 25 Feb 2023 21:08:44 GMT</pubDate>
    <dc:creator>sabinx</dc:creator>
    <dc:date>2023-02-25T21:08:44Z</dc:date>
    <item>
      <title>How do I disable SMS authentication completely, but leave two-factor authentication enabled?</title>
      <link>https://ttlc.intuit.com/community/taxes/discussion/how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/2910082#M1062263</link>
      <description>SMS is not a secure protocol. As long as a text message can be used to authenticate, my account cannot be secure. I use two-factor authentication, and I have already set it up. Sadly, the site still wants to use texting as a fallback option and I do not want that.</description>
      <pubDate>Mon, 23 Feb 2026 11:40:11 GMT</pubDate>
      <guid>https://ttlc.intuit.com/community/taxes/discussion/how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/2910082#M1062263</guid>
      <dc:creator>sabinx</dc:creator>
      <dc:date>2026-02-23T11:40:11Z</dc:date>
    </item>
    <item>
      <title>Re: How do I disable SMS authentication completely, but leave two-factor authentication enabled?</title>
      <link>https://ttlc.intuit.com/community/taxes/discussion/re-how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/2911444#M1062824</link>
      <description>&lt;P&gt;Often a verification code is provided to the user via text message or automated phone call. Please see this &lt;A href="https://ttlc.intuit.com/turbotax-support/en-us/help-article/security-risk/two-step-verification/L2NN4dPRl_US_en_US" target="_blank"&gt;Help Article&lt;/A&gt; for more details.&lt;/P&gt;</description>
      <pubDate>Sat, 25 Feb 2023 18:57:30 GMT</pubDate>
      <guid>https://ttlc.intuit.com/community/taxes/discussion/re-how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/2911444#M1062824</guid>
      <dc:creator>HeatherPLO</dc:creator>
      <dc:date>2023-02-25T18:57:30Z</dc:date>
    </item>
    <item>
      <title>Re: How do I disable SMS authentication completely, but leave two-factor authentication enabled?</title>
      <link>https://ttlc.intuit.com/community/taxes/discussion/re-how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/2911871#M1063006</link>
      <description>&lt;P&gt;Thank you for the response. This is the exact behavior I wish to remove. Signing in with a text message might be okay for a casual games website or social platform, but is grossly inappropriate for websites that collect, store, process, and display extremely sensitive and valuable financial data.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Did you know that SMS Authentication is illegal for banking websites in some countries?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This website does have actual 2FA (code generator app) capability. I had to use it to sign in to write this reply. There is no good reason for me to fall back to text messages. SMS is the weak link in a strong chain; being able to bypass my code generator with a text message is not acceptable security and makes everyone more vulnerable.&lt;/P&gt;</description>
      <pubDate>Sat, 25 Feb 2023 21:08:44 GMT</pubDate>
      <guid>https://ttlc.intuit.com/community/taxes/discussion/re-how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/2911871#M1063006</guid>
      <dc:creator>sabinx</dc:creator>
      <dc:date>2023-02-25T21:08:44Z</dc:date>
    </item>
    <item>
      <title>Re: How do I disable SMS authentication completely, but leave two-factor authentication enabled?</title>
      <link>https://ttlc.intuit.com/community/taxes/discussion/re-how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/3405926#M1255339</link>
      <description>&lt;P&gt;Does Intuit care about cybersecurity?&amp;nbsp; No legitimate financial website still forces their users to use SMS text message as an option for 2FA/MFA.&amp;nbsp; This should make the Inuit Chief Information Security Officer (CISO) very queasy.&lt;/P&gt;</description>
      <pubDate>Fri, 06 Dec 2024 05:53:54 GMT</pubDate>
      <guid>https://ttlc.intuit.com/community/taxes/discussion/re-how-do-i-disable-sms-authentication-completely-but-leave-two-factor-authentication-enabled/01/3405926#M1255339</guid>
      <dc:creator>eweb</dc:creator>
      <dc:date>2024-12-06T05:53:54Z</dc:date>
    </item>
  </channel>
</rss>

