Hi @mrcarrot66 

Are you referring to the iD Mobile app/website?

Unfortunately this isn’t something supported on there, sorry.

Tom

Hi thanks for your reply, yeah that's what I mean. 

That's really bad that it's not supported. Like I don't think I've ever had a phone contract where the provider didn't at least send an SMS verification message

Come on iD. 2FA is absolutely essential!

Hi @mrcarrot66,

Welcome to the Community!

This isn’t something that we offer at the moment.

However we can assure you that your account is safe and secure.

Kash

What exactly is your assurance that our accounts are secure? Not having 2FA in 2024 is frankly reckless.

Can you please ensure that at least by the time you offer eSIMs you have 2FA implemented? Also, that you offer TOTP or other methods that don't rely on SMS?

Thanks

Agreed. None SMS based would be best but at least SMS would be a start. 

ID team this really needs attention. You absolutely shouldn't be allowing access to such sensitive information without 2FA. 

Hi @mrcarrot66,

Thanks for your feedback and we will pass it over to the relevant team.

Hopefully it’s something that we can introduce in the future.

Kash

I disagree that accounts are secure.  My daughter’s account has been hacked twice in the last five months necessitating a new mobile number each time.  Your procedures for allocating e-sims is not secure, so 2 -factor authentication is essential.  Perhaps a complaint to the Information Commissioner about your lack of customer account security is required to make you start taking security seriously.

Hi @LeeJenk24 

You are free to make a complaint to whomever you wish to.

If someone is having issues with their account, we’d recommend them getting in touch with us themselves.

Tom

It has happened again this morning, so iD’s claim that accounts are secure is incorrect.  This was after having a new number allocated, changing the e-mail address linked to the account and updating the password.  As ID have no procedure for checking requests for eSims, or double checking requests to port numbers to other providers, other than a text saying the request is being carried out (which still happened today after my daughter contacted you to say the request was not from her, and was told it would need to go to technical which will take up to 48 hours) multifactor authentication is vital in 2024.  A complaint will be submitted to the ICO.  iD have a duty of care to customers which it is failing at.  How a technology company can be so lax with security is beyond me. 

Hi @LeeJenk24,

I would advise that you contact our Live Chat Team and they can assist you further.

Kash