Two-Factor Authentication (2FA) When Travelling

Two-factor authentication (2FA) adds an extra layer of protection by requiring not only a password, but also a second form of verification. In today’s digital world, the security of your accounts when using online services is very important, especially when travelling.

However, when travelling, access to these multi-factor authentication methods can be compromised, especially when we don’t have access to our phone number or the Internet.

Here are some tips and tricks on how to effectively manage 2FA on the move.

First of all, let’s start by defining what it is: two-factor authentication or 2FA is a security method that requires two separate forms of identification to access an account, whether it’s your bank account or your loyalty program account. This greatly reduces the risk of unauthorized access, even if your password has been compromised.

Here’s an example of a screenshot illustrating two-factor authentication for a National Bank account, whether to access the online banking platform or to access à la carte Rewards to redeem your points.

In most cases, two-factor authentication is automatically activated by banks to ensure the security of your account. It is generally not possible to deactivate it. When you log on, the system detects whether you are using a new device or are in an unusual location. If this is the case, a verification request is automatically displayed.

Usually, you will then receive a code by SMS (text message), e-mail or via a notification from the banking application. Simply enter this code in the box provided to finalize your connection and access your account in complete security.

Each institution has its own 2FA methods for accessing online services, and it’s crucial to know what these are. With Tangerine, for example, all you need is Internet access to access your bank account. Desjardins, on the other hand, requires an SMS code, unless you use their mobile application. So it’s important to be prepared for your bank’s specific requirements.

The following table summarizes the two-factor authentication methods used by Canadian banks:

These 2FA methods also apply when you want to use your points abroad. If you’re in the habit of booking as you travel, banks will ask you for a 2FA to connect to portals such as Expedia for TD or NBC À la carte Rewards, for example. Make sure you’re ready to handle these verifications when you travel.

Like the banking rewards portals mentioned in the previous section, many loyalty programs have also adopted 2FA measures. Here’s an overview of the methods used:

Google Authenticator is a mobile application developed by Google to enhance the security of online accounts through two-factor authentication. It is available from the Apple Store and Google Play. It generates temporary single-use codes, which serve as a second level of verification after password entry. Unlike codes sent by SMS, Google Authenticator works offline and requires no Internet or mobile network connection, making it more secure against certain forms of hacking, such as SMS interception.

To use Google Authenticator, you first need to associate it with an account by scanning a QR code or entering a secret key provided by the service concerned (banks, messaging services, social networks, etc.). Once configured, the application generates a six-digit verification code, which is renewed every 30 seconds. When connecting to a 2FA-protected account, simply enter this code to confirm your identity.

The advantage of Google Authenticator is that it reduces the risk of phishing attacks and password theft. However, it is important to back up your recovery codes or use a backup solution, because if the application is deleted or you change phones without transferring your accounts, it may be difficult to recover access to protected services.

TD stands out from other Canadian institutions and has adapted to today’s reality with its TD Authenticate application. TD Authenticate is a two-factor authentication solution for secure access to online accounts. Unlike the traditional method, which uses SMS or e-mail to send security codes, TD Authenticate generates verification codes directly on your mobile device, offering enhanced security. Once the application is installed, it can be used to confirm your identity every time you log in to your TD account, replacing or supplementing other verification methods. This method is particularly useful when travelling, as it does not require access to the mobile network to receive SMS messages, thus avoiding roaming charges or connection problems.

The application works in sync with your TD bank account, and each time you log in, you must approve a code sent directly to the application. This allows you to access your account more securely, while reducing the risk of security codes being intercepted. TD Authenticate is simple to use, and takes just a few minutes to set up.

The security of your online accounts should not be overlooked when travelling. By taking the necessary precautions and informing yourself about the authentication methods used by your banks and loyalty programs, you’ll avoid many unpleasant surprises abroad.

However, the 2FA system in Canada still relies heavily on SMS, a method that can be cumbersome and costly for travellers. In other countries, banking institutions already favour authentication applications, offering enhanced security without relying on a mobile network. Fortunately, some Canadian banks are starting to move in this direction. For example, TD already offers a more modern solution than others with its TD Authenticate application, which enables secure access to accounts without requiring a mobile network for two-factor authentication when travelling.

It would be desirable for other banks to follow this example and adopt more flexible and secure solutions, facilitating access to accounts without exposing users to unnecessary risks or costs. In the meantime, it is essential to adapt one’s practices and use the tools available to guarantee the protection of one’s accounts, wherever one may be in the world.