AARP Hearing Center
How do I enable 2 factor or multifactor authentication [ Microsoft authenticator or Google authenticator ] on my AARP login. Currently it sends a text to my cell phone but I'm wondering if there is a way to setup one of the authenticator apps that has an ever changing one time code.
Microsoft authenticator or Google authenticator is what I use for other accounts when available. https://support.microsoft.com/en-us/account-billing/about-microsoft-authenticator-9783c865-0308-42fb...
Thanks for your assistance!
Great question, @RobW142529. The multifactor authenticator we currently use to secure our members accounts is through text message only. Here you'll find an article with the steps: https://help.aarp.org/s/article/rewards-verification?cmp=SNO-LITHIUM---&socialid=14197088719 - Diana G.
AARP - So you therefore expect & require your members (who are seniors!) to have a cell phone & cellular coverage? If you would allow VoIP numbers then those w/o cell phones would be able to take advantage of MFA.
Also you should not restrict MFA to only cell phone usage, you should allow a code to be emailed, your 'security' is too excessive & not practical, especially for seniors!
Hello, when will AARP be adding TOTP?
And for those who haven't heard of TOTP see below:
Microsoft Authenticator and Google Authenticator are both TOTP (Time‑based One‑Time Password) authenticators that generate 6‑digit codes for two‑factor authentication (2FA) or multi‑factor authentication (MFA).
Authenticator app (most common)
TOTP app (technical term)
2FA app
MFA app
OTP generator
Because they generate codes using the Time‑based One‑Time Password algorithm (RFC 6238). The code changes every 30 seconds.
@LakeChelan I dont think any time soon, look how long it’s taking for them to figure out why there are redemption issues. Not high on the bucket list. Maybe those waiting to redeem would like to respond to your request wish, but don’t think TOTP is on the top of their bucket list either.
This is unfortunate, and outdated. SMS is the least desirable 2FA solution currently available (other than not using 2FA at all.) AARP should seriously consider upgrading to either TOTP, hardware keys, or (ideally) passkeys for more robust security