Demand Ally Bank to Implement Advanced Two-Factor Authentication Methods

The Issue

As a user of Ally Bank's online banking services, I recognize the deep need for robust security measures to safeguard my funds. In recent times, banking institutions have increasingly become the target of malware and phishing campaigns trying to steal customer credentials—a reality that threatens the security of my money. 

Ally Bank only offers phone-based two-factor authentication (2FA).  This known to be insecure against SIM-swapping attacks Rather regrettably, Ally Bank doesn't currently offer advanced two-factor authentication (2FA) options such as Yubikey, HOTP, or TOTP. These methods provide an extra layer of security beyond the traditional password, minimizing breaches and further securing customer accounts.  Most other banks provide these as 2FA.  Accounts held at Chase, Vanguard, Schwab, ETrade/Morgan Stanley can all be protected by physical tokens which are much more difficult to spoof, as they require physical ownership.

Thus, I request that Ally Bank prioritize customer security by integrating these modern and secure 2FA authentication options into their system. Investing in these solid security protocols will not only serve its most immediate function of protecting customer funds but will also bolster Ally Bank's reputation as a bank that truly cares for its customers. Currently Ally Bank's security page talks about many security improvements, but it is lacking one of the most basic 2FA features that most other banks provide.

Please support this campaign by signing this petition and urging Ally Bank to upgrade their security methods. Your signature will play a crucial role in protecting our hard-earned money.

15

The Issue

As a user of Ally Bank's online banking services, I recognize the deep need for robust security measures to safeguard my funds. In recent times, banking institutions have increasingly become the target of malware and phishing campaigns trying to steal customer credentials—a reality that threatens the security of my money. 

Ally Bank only offers phone-based two-factor authentication (2FA).  This known to be insecure against SIM-swapping attacks Rather regrettably, Ally Bank doesn't currently offer advanced two-factor authentication (2FA) options such as Yubikey, HOTP, or TOTP. These methods provide an extra layer of security beyond the traditional password, minimizing breaches and further securing customer accounts.  Most other banks provide these as 2FA.  Accounts held at Chase, Vanguard, Schwab, ETrade/Morgan Stanley can all be protected by physical tokens which are much more difficult to spoof, as they require physical ownership.

Thus, I request that Ally Bank prioritize customer security by integrating these modern and secure 2FA authentication options into their system. Investing in these solid security protocols will not only serve its most immediate function of protecting customer funds but will also bolster Ally Bank's reputation as a bank that truly cares for its customers. Currently Ally Bank's security page talks about many security improvements, but it is lacking one of the most basic 2FA features that most other banks provide.

Please support this campaign by signing this petition and urging Ally Bank to upgrade their security methods. Your signature will play a crucial role in protecting our hard-earned money.

Support now

15


The Decision Makers

ALLY BANK
ALLY BANK
Petition updates