AARP Hearing Center
How do I enable 2 factor or multifactor authentication [ Microsoft authenticator or Google authenticator ] on my AARP login. Currently it sends a text to my cell phone but I'm wondering if there is a way to setup one of the authenticator apps that has an ever changing one time code.
Microsoft authenticator or Google authenticator is what I use for other accounts when available. https://support.microsoft.com/en-us/account-billing/about-microsoft-authenticator-9783c865-0308-42fb...
Thanks for your assistance!
Great question, @RobW142529. The multifactor authenticator we currently use to secure our members accounts is through text message only. Here you'll find an article with the steps: https://help.aarp.org/s/article/rewards-verification?cmp=SNO-LITHIUM---&socialid=14197088719 - Diana G.
AARP - So you therefore expect & require your members (who are seniors!) to have a cell phone & cellular coverage? If you would allow VoIP numbers then those w/o cell phones would be able to take advantage of MFA.
Also you should not restrict MFA to only cell phone usage, you should allow a code to be emailed, your 'security' is too excessive & not practical, especially for seniors!
Hello, when will AARP be adding TOTP?
And for those who haven't heard of TOTP see below:
Microsoft Authenticator and Google Authenticator are both TOTP (Timeโbased OneโTime Password) authenticators that generate 6โdigit codes for twoโfactor authentication (2FA) or multiโfactor authentication (MFA).
Authenticator app (most common)
TOTP app (technical term)
2FA app
MFA app
OTP generator
Because they generate codes using the Timeโbased OneโTime Password algorithm (RFC 6238). The code changes every 30 seconds.
@LakeChelan I dont think any time soon, look how long itโs taking for them to figure out why there are redemption issues. Not high on the bucket list. Maybe those waiting to redeem would like to respond to your request wish, but donโt think TOTP is on the top of their bucket list either.
This is unfortunate, and outdated. SMS is the least desirable 2FA solution currently available (other than not using 2FA at all.) AARP should seriously consider upgrading to either TOTP, hardware keys, or (ideally) passkeys for more robust security