SS Multifactor Authentication without Cell Service

H

Hermit

Thinks s/he gets paid by the post
Joined
Oct 7, 2012
Messages
3,165
Location
Colorado Mountains
I just got an e-mail from Social Security informing me that they will require multifactor authentication to log in to My Social Security. They will require a cell phone number that accepts texts so you can enter a texted number into the login. If you don't have that capability, sorry, you cannot log in to My Social Security.

My problem is there is no cell service in my area. I have phone messages forwarded to my Google e-mail account. Does anyone know if text messages can be forwarded from a cell phone to Gmail while still getting them on the cell phone?

This is getting complicated.
 
Government at its best! I know you can get text messages with a lot of phone services now but not sure how it would work.

Sent from my Nexus 7 using Early Retirement Forum mobile app
 
Last edited:
Sorry I can't help but this change really tees me off. I really don't want to give the gummint my mobile phone number even though I know they could track it down. Guess I'll be working with them by snail mail.
 
I got the same email, but clicking through made it sound very much an opt in program and failing to sign up just leaves you with the same password based security you have now.

I know that Verizon has a web based service to send and receive text messages if you have a cell phone with them but don't have your phone with you.

How does the gubbermint track your whereabouts and social contacts if you don't have cell service?
 
athena53 said:
Sorry I can't help but this change really tees me off. I really don't want to give the gummint my mobile phone number even though I know they could track it down. Guess I'll be working with them by snail mail.
Click to expand...


Don't worry. They already have it. Especially if you're buying throw away " burner phones" from Walmart.
 
Guess SS and NIST don't get along very well:

https://www.engadget.com/2016/07/26/nist-sms-two-factor-authentication-guidelines/

"The US agency that sets guidelines and rules in cryptography and security matters is discouraging the use of text messaging in two-factor authentication. In the latest draft of its Digital Authentication Guideline, the National Institute of Standards and Technology (NIST) states that "[out of band authentication] using SMS is deprecated, and will no longer be allowed in future releases of this guidance." Out of band authentication means utilising a second device to verify your identity."
 
GravitySucks said:
I got the same email, but clicking through made it sound very much an opt in program and failing to sign up just leaves you with the same password based security you have now.

I know that Verizon has a web based service to send and receive text messages if you have a cell phone with them but don't have your phone with you.

How does the gubbermint track your whereabouts and social contacts if you don't have cell service?
Click to expand...

I got an email also. Sounded to me like the 2FA is a requirement and each time signing in, a one time text is required.
 
Animorph said:
Guess SS and NIST don't get along very well:

https://www.engadget.com/2016/07/26/nist-sms-two-factor-authentication-guidelines/

"The US agency that sets guidelines and rules in cryptography and security matters is discouraging the use of text messaging in two-factor authentication. In the latest draft of its Digital Authentication Guideline, the National Institute of Standards and Technology (NIST) states that "[out of band authentication] using SMS is deprecated, and will no longer be allowed in future releases of this guidance." Out of band authentication means utilising a second device to verify your identity."
Click to expand...

Asking one arm of the government to know what another arm is doing is probably a little much. Even if one is supposed to set standards for the other to use. :nonono:
 
You might try Google Voice. It has free texting and works from your browser. Not sure if it will work for this, but worth a try.

Sent from my LG-D801 using Early Retirement Forum mobile app
 
The cell system is inherently insecure. They would be better off using something like Google Authenticater.


4
 
spud99 said:
You might try Google Voice. It has free texting and works from your browser. Not sure if it will work for this, but worth a try.

Sent from my LG-D801 using Early Retirement Forum mobile app
Click to expand...

+1 My first thought too...

Sent from my LGLS751 using Early Retirement Forum mobile app
 
spud99 said:
You might try Google Voice. It has free texting and works from your browser. Not sure if it will work for this, but worth a try.

Sent from my LG-D801 using Early Retirement Forum mobile app
Click to expand...

That is where my cell voice mail messages are forwarded. I know I can send SMS texts to DS. I'll have to figure out if I can receive texts via my Google Voice number.
 
Got the same email today. :mad: I'm for better security but this sucks. (Yes more security is usually inconvenient - check out the airports lately?) Here we have no choices and almost no notice. What if you don't have a cell phone, or don't have reliable service where you live or don't have/use the text capability, etc, etc.

Several of the banks I deal with have a similar 2FA system. However, they give you the options of cell phone text, email or automated land line voice and one will even allow you to opt out.

Guess that's just to complicated for the government. I was an advocate of their web service which "had been" working pretty well, and was user friendly. I really don't know why and I'm so surprised at something like this from the SSA!
 
Last edited:
Last edited:
What are the chances that it will work with an international number? Lots of expats live overseas.

Another government organisation, TreasuryDirect, has 2FA and they send the verification code to the email I have registered with them. (I can't remember if a cell number was an option).
 
Hermit said:
That is where my cell voice mail messages are forwarded. I know I can send SMS texts to DS. I'll have to figure out if I can receive texts via my Google Voice number.
Click to expand...
Note that there is an option to get google voice SMS in hangouts. I'm using that option.
 
Got the same email. No more than I log on to SS, not a problem. Also got something similar from Fidelity Investments. Won't send me a text code every time I log on, but for certain transactions and just at random. Not thrilled about that one either, but I can understand trying to make the system more secure.
 
athena53 said:
Sorry I can't help but this change really tees me off. I really don't want to give the gummint my mobile phone number even though I know they could track it down. Guess I'll be working with them by snail mail.
Click to expand...

Darn gummint intruding on my privacy, I'm not even going to give SS my mailing address. :facepalm::facepalm::facepalm: :LOL::LOL:
 
Another vote for Google Voice. I use it to send and receive texts as well as with Hangouts to make unlimited free calls.
 
Google Voice solves the international problem too. If you have a U.S. Google Voice number, you can send and receive text messages from anywhere in the world (laptop or cell phone), using your data.

I have a U.S GV number and send/receive my text messages anywhere I am in the world provided I have data access (e.g. local sim).
 
I use two factor authentication whenever possible. After a relative had his google mail taken over and the password changed, that could not have happened with two factor authentication. It's a pain, but there are a lot of hackers out there.
 
I'll use my GV number. It should work fine. I'm going to sit on this for a while. Not that they might change their mind or anything... :angel:
 
I signed up with my Google voice number maybe a year ago. Worked than still works, I can't get Wells Fargo to accept Google voice.
 
+1. Google Voice has saved me many $$. Ported my home number to it years ago...

Sent from my VS986 using Early Retirement Forum mobile app
 
You must log in or register to reply here.

Similar threads

Mr._Graybeard
I got phished
2 3 4
Replies
85
Views
5K
isisdave
I
PaunchyPirate
Helping an elderly parent stay on top of their financial accounts
Replies
24
Views
935
1242Vintage
1
D
Facebook started 2FA
2
Replies
26
Views
1K
COcheesehead
C
R
Do you click “AGREE” without reading privacy policy, terms of service, or other docs?
2
Replies
42
Views
2K
JoeWras
JoeWras
T
Vanguard with Yubikey is pointless
2
Replies
42
Views
7K
RetMD21
R

Latest posts

Back
Top Bottom