What is authentication?
Authentication is the process of reasonably verifying that you are who you say you are. For online systems this is typically accomplished via the use of a unique identifier, often your email address, and one or more additional items that provide further assurance of the identity you assert as being yours.
What is two-factor authentication (2FA)?
Two-factor authentication (2FA) is a method for helping to keep online accounts more secure by enforcing the use of two of these types of “factors”:
- Something you know (like your password)
- Something you have (like your mobile phone)
- Something you are (like your fingerprint)
Two-factor or multi-factor authentication is a common and recommended practice for protecting important accounts such as those associated with financial services.
2FA strengthens an account’s security because the second factor acts as an additional “gate.” This extra gate helps your account security by reasonably verifying that you are who you say you are after you submit your correct email address and login password.
Is biometric login like Face ID the same thing as two-factor authentication?
No. Some mobile devices offer biometric login, which uses a physical characteristic belonging only to you (like your fingerprint or your face) to log you in to your phone and into specific apps that you authorize. Biometric login is a convenient and safe way to log in, but it’s still only acting as a single “factor” to access your account and can only protect you if you’re using that same device where you have enabled a biometric login.
Even if you use something like Face ID on your mobile device, it’s still important to set up a second factor as an added layer of protection. The second factor helps protect your account in case someone other than you attemps to access your account, or if you want to access your account from multiple devices.
Why should I enable two-factor authentication for my Glance Capital account?
When you enable 2FA, a verification code will be required to log into your account, in addition to your email and password. Depending on the method you choose, the verification code will be sent to you via text (SMS), voice call, or email. These codes can only be used once and expire after a short time frame.
You can also allow Glance Capital to “remember” devices you use frequently, so that you don’t have to use a verification code to login every single time you visit your account(s). We do not recommend that you “remember” any device that is shared or publicly accessible.
How do I turn on two-factor authentication?
Glance Capital customers who do not already have 2FA enabled will see a screen at login prompting them to set up 2FA when logging in to their Glance Capital account.
Helping to protect our members’ personal and financial information from unauthorized access and malicious activity is a top priority for Glance Capital. 2FA is fast and easy to set up, and helps protect your account, even if your password is compromised.
Can I change the way I receive my verification code?
Yes, you can receive login verification codes as your second factor authentication method through text, email, or voice calls. To manage these options, visit your security settings in your profile, and select “Two-factor authentication” to get started.
I just received a text from Glance Capital with a verification code, but I did not try to log in. Should I be worried?
Unexpectedly receiving a verification code (also called “two-factor authentication token”) from Glance Capital can happen when someone other than you attempts to access your account. The most common scenario is when you open a third-party app where you may have linked your Glance Capital account, such as a personal financial management tool. Opening up third-party apps where your Glance Capital account is linked is detected as a type of log in by Glance Capital—in some cases, you’ll need to enter this login code on the third-party app to refresh the apps’s connection with Glance Capital.
If you received a verification code when you were not attempting to log in to your Glance Capital account, and/or it is not through a third-party app, you should change your password. As a reminder, this password should be unique to your Glance Capital account and not be used for other online accounts or services.
How else is Glance Capital working to keep my information safe?
Glance Capital takes the privacy and security of its members’ financial and personal information very seriously. We maintain industry-standard administrative, technical and physical safeguards designed to protect your information’s confidentiality and integrity. Our systems and security controls are reviewed by third parties against security standards such as SOC2 and rigorous third-party penetration testing is done at least annually.