• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos1 Stats

Two-step Authentication available?

I would like two-step authentication offered, code text message'd to my phone for use during login to the Identity Safe. Will you be offering this option?

Replies

Kudos1 Stats

Re: Two-step Authentication available?

Two step authentication is available for your Norton Account. If you get in the habit of signing out of your Norton Account after closing your ID Safe vault, you will be able to take advantage of the 2 step authentication.

If 2 step were added to ID Safe, you would actually then have a 4 step. Sign into Norton account with password (1), enter VIP Access code (2), Sign into ID Safe Vault ( 3 ), enter VIP Access code (4).

A strong password for the vault should be sufficient.

Things happen. Export/Backup your Norton Password Manager data.
Kudos1 Stats

Re: Two-step Authentication available?

Kudos0

Re: Two-step Authentication available?

I found that the VIP program only keeps the key for 30 seconds on my Android phone, which is fine if I'm using my computer.  However, I found it cumbersome to flip between Norton Mobile Security and the VIP app to enter the code within the time frame on my Galaxy S5, so I changed my profile setting on-line to turn off 2FA.

Kudos0

Re: Two-step Authentication available?

In my experience, 2FA is available when accessing your Norton account via a web browser and when accessing the "Identity Safe Web Portal". However when using the downloadable executable "Identify Safe Client" 2FA is not available. Am I mistaken about this?

It seems to me that anyone can install the client and then attempt to access the account and vault without 2FA. I acknowledge it'd be difficult with well chosen account and vault passwords but still I want to know when someone's trying by receiving an SMS text or at least know that a time limited code only I should know is required as well.

Kudos0

Re: Two-step Authentication available?

However when using the downloadable executable "Identify Safe Client" 2FA is not available. Am I mistaken about this?

2FA is not available for the ID Safe app itself. Although when you first sign into the app, you will have to access your Norton Account, which will trigger the 2FA if you have it set up for your Norton Account. Then you still need to enter a Vault password.

If you want another layer of protection that would work like 2FA, for Android devices you can install Norton App Lock app. You can then have App Lock protect your ID Safe app with a PIN. Then you will still have to enter the vault password.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Two-step Authentication available?

Thank you for taking the time to reply. I attached a pdf showing the "Identity Safe Client" software to which I'm referring and the steps I'm going through. The account has two factor authentication on and it works as expected when logging into the norton account (https://login.norton.com) and accessing the Norton Identity Safe Web Portal (https://identitysafe.norton.com).

It appears to me that by using the client shown in the pdf that 2FA is bypassed degrading security.

File Attachment: 
Kudos0

Re: Two-step Authentication available?

From your first post, do you have 2FA set up on your Norton Account?

Do you already have a Norton Security product installed? If so, you should already have Identity Safe included with that product. It is best not to have both the included product and the stand alone version installed at the same time. This can cause conflicts that can cause strange behavior in the ID Safe.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Two-step Authentication available?

Thanks again for your help. Yes, I have 2FA set up on my Norton Account. I tried the identity safe client on the pc on which I have the Norton Security installed and 2FA worked! The one with Norton Security does not have the standalone id safe client since it's already included.

I've another PC which does not have Norton Security and has the standalone identity safe client, that's the one that wasn't working. I'll test it further.

Kudos0

Re: Two-step Authentication available?

Did 2FA work the first time you logged into the stand alone ID Safe after installing it? If so, it is possible that the app is not signing you out of the Norton Account when you close the vault. I just tested with my ID Safe from my Norton Security product, and unless you specifically sign out of your Norton Account from your Norton Security, it too will not ask for 2FA next time you go to log into the vault.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Two-step Authentication available?

I've never seen 2FA work on the standalone ID safe client. All comments below are in regard to the free downloadable standalone ID safe client. These findings are not in reference to the id safe client bundled with norton security.

I understand that with the ID safe client open you can close the vault; then with the vault closed and prompting for a password; you can either 1) open the vault again or 2) sign off the norton account.

I tried closing the ID safe client vault, signing off the ID safe client norton account, exiting the ID safe client, closing all browsers, restarting the computer, before doing anything else on the computer, starting the ID safe client, enter the email address, enter the norton account password, get prompted for the vault password, enter the vault password, vault opens. I never got prompted for 2FA.

Kudos0

Re: Two-step Authentication available?

That does seem odd. On your other computer, sign out of your Norton Account by clicking on your email address on the main page of your Norton Security product, and clicking Sign out. Then try to log back into your vault. It should first ask for email and password for Norton Account. Does it then ask for the 2FA?

Do you have any other Norton products on the machine with the stand alone version that you might be signed into? 

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Two-step Authentication available?

I appreciate the effort you've put into this issue. On the computer with norton security signing out of the account and signing back in does result in the 2FA prompt.

On the computer with the standalone product to ensure that I'm not already authenticated with 2FA, I tried rebooting and using the standalone IDsafe client first thing, i.e. without starting any browser sessions or anything else manually. I don't have another computer I can test with so I created a new local account "GuestTest" and first thing upon logging into the OS I ran the IDsafe client, login to the norton account with email and password, I then get prompted for the vault password which opens the vault, I don't get the 2FA prompt. I thought that was a pretty good 2FA test, your thoughts?

Kudos0

Re: Two-step Authentication available?

Your test does seem valid and shows that 2FA does not seem to be working on that computer with Stand Alone ID Safe.

I'll ask around to see if anyone with experience with Stand Alone version can test this. 

In the mean time, you might want to try posting in the Symantec Connect forums. The VIP system is actually a Symantec product. Maybe someone there can add some insight for you. It looks like the forums have been re designed, as I cannot find the threads I used to see. But you can post in this new forum board.    https://www.symantec.com/connect/security/forums/vip-0

EDIT

Can you try uninstalling the Stand Alone ID Safe from that compter. Then restart the computer and try logging into your Norton Account at   https://account.norton.com

See if the 2FA is called for.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Two-step Authentication available?

Did as you asked, uninstalled the stand alone id safe, restarted, logged into norton account and was prompted for 2FA.

Kudos0

Re: Two-step Authentication available?

Ok, now try logging in again. Then make sure you log out before you close the browser. Then reinstall the Stand Alone ID Safe and see if logging in again will ask for the 2FA.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Two-step Authentication available?

Did as you asked and the standalone ID safe client does not prompt for 2FA on my computer.

Kudos0

Re: Two-step Authentication available?

Interesting!!! But I'm out of ideas. I'll bring this thread to Norton's attention. Maybe someone else can shed some light on this.

Things happen. Export/Backup your Norton Password Manager data.

This thread is closed from further comment. Please visit the forum to start a new thread.