Hello, I've seen that 2FA is available on the swisspass website and this is great. Really. But the only option to activate 2FA today is per... SMS, which is actually NOT secure because SMS are NOT encrypted and they are a delightful target for phishing scams. A better option would be to let a client (e.g. an authenticator application) generates [Time-based one-time password](https://en.wikipedia.org/wiki/Time-based_one-time_password). Also, this is readily available in most web frameworks nowadays. I hope to see this feature in a very near future because every website out there having code send by SMS are switching really fast to other techniques, for really good reasons. Thanks. Warm Regards.

Hello, thanks for your answer @"RolandP"#p115154 but on the link you provided, there is absolutely nothing about the swisspass login process, nor swisspass at all actually...: [upl-image-preview uuid=7f7b9f55-8475-4935-9689-28c269190acb url=https://static.community.sbb.ch/2025-01-29/1738176437-704305-image.png alt={TEXT?}] So I'm pretty sure that, whatever choice I make, my message won't be taken into account because it will be off-topic.

Feature Request: [security] 2FA option using TOTP codes during login process

Laujacka41

Hello,

I’ve seen that 2FA is available on the swisspass website and this is great. Really.
But the only option to activate 2FA today is per… SMS, which is actually NOT secure because SMS are NOT encrypted and they are a delightful target for phishing scams.

A better option would be to let a client (e.g. an authenticator application) generates Time-based one-time password.

Also, this is readily available in most web frameworks nowadays.

I hope to see this feature in a very near future because every website out there having code send by SMS are switching really fast to other techniques, for really good reasons.

Thanks.
Warm Regards.

RolandP

Hello Laujacka41

Welcome to the SBB Community.
Since we are a customer support forum run by volunteers, and not the SBB officials, we are unable to further process your feedback.

Please kindly use the feedback forms made for that purpose:

https://www.sbb.ch/en/help-and-contact/customer-service/praise-comments/reklamation.html

Kind regards,
Roland

Laujacka41

Hello,

thanks for your answer RolandP but on the link you provided, there is absolutely nothing about the swisspass login process, nor swisspass at all actually…:

So I’m pretty sure that, whatever choice I make, my message won’t be taken into account because it will be off-topic.

RolandP

Hello Laujacka41

Long time no read.
Can you see the option “other products”? That’s where your request will fit in.

Kind regards,
Roland