App and Website login constantly asks for verification - never remembers trusted devices

[davey_lad]

Why is it that every time I access the website and/or app (Android Galaxy S23 Ultra) I am constantly nagged to enter a verification code (sent via email or text).  This is especially annoying when using the phone app as it explicity it asks if I "trust this device".

Why not just add biometric (fingerprint/face id) support and be done with it?

Does anyone else have this issue?

[Strandloper · Accepted solution]

@davey_lad ,

Please read the numerous recent posts on this type of "issue". 

[MSF]

@davey_lad A quick search will show lots of posts oaths topic as @Strandloper says.

If you have Face ID or Touch ID, the app should be fine on a phone - mine seems to work well with no issues.

[davey_lad]

[the irony of having to verify my identity/browser again to reply to this] 🤣

@MSF yes, just noticed the app does have biometric option in the settings.  Suppose I'm just used to apps automatically asking if I want to enable it when they detect the phone supports it.

I have now seen the various posts complaining about this.. I guess my original search terms weren't up to the task.

[Michael_T]

I started experiencing problems with the iOS app at the last update.  The app has a setting under Security and Privacy option to use biometrics ie FaceID in my case, and despite ticking this option, the app is totally ignoring this and reverting back to 2FA every day.

I have raised this with SMARTY, via chat.  
They say this has been passed to the developers, and they are awaiting a response back.

[TsuNabs]

Hi davey_lad. I know its an old post but I'm adding my penny's worth which no doubt is shared by many Smarty users who have tried to contact Smarty. Other service providers who have real humans rather than chat bots manning their helplines only require minimal but obviously necessary security verification.  Smarty, like many other budget providers, unfortunately rely entirely on systems designed by IT experts, who unfortunately, often put security before ease of use.  Password & SMS verification code is required just to log onto your account just like a bank or a payment service. If that wasn't overkill, when you start  a web chat you need to confirm your birthdate, post code even the last payment amount.  Those in charge at Smarty must think they are running a bank or maybe they are just letting their security gurus run amok. In any event, until the management at Smarty come to their senses, be prepared to waste time repeatedly entering your multiple verification credentials just to get any communication started.     

[SmartyTrousers]

I think you'll find the more premium providers often have a similarly high level of security as Smarty. For example, Vodafone also require both your password and a one-time code to log into their app or website, and will also get you to confirm various personal details when you start a chat with them to prove it's really you.

This stuff is more important now than ever, because if someone can log into your mobile account or get customer services to make changes to your account, they can get your number transferred to a new SIM where they can then receive things like one-time codes required to log into your bank or approve a transaction on your credit card.

It seems the IT experts have put a bit more thought into this than you have.