Tried turning off 2FA for a week to see what would happen

I got a new phone and was too lazy to set up the authenticator app again, so I left my banking app with just a password. Three days later I got a weird text with a code I didn't ask for. Someone was trying to log in from a city two states over. Turned 2FA back on within 10 minutes. Has anyone else had close calls like this after disabling something?

4 comments

4 Comments

phoenix_singh256h agoMost Upvoted

Dude that's scary. And @flores.emma is totally right about bots, they don't stop. Glad you caught it fast.

quinnm772d ago

Man I had a similar thing happen with my email. Forgot to renew my VPN and figured whatever, not a big deal. Woke up the next morning to like 15 failed login attempts from Russia and Brazil. Had to change my password and lock everything down again. People really do just sit around trying to brute force accounts all day I guess. Never again am I skipping that stuff.

flores.emma2d ago

Used to think that stuff was just paranoia, but after getting hit with credential stuffing on an old account I changed my mind real quick. Bots don't sleep, they just keep trying combos til something sticks.

lewis.brian2d ago

Used to think people were overreacting until my own account got hit, now I'm a believer in locking everything down.