Logged in without being prompted for Multi-factor authentication (MFA)

[Aptic]

I want to have MFA on my account for security purposes as currently I can login via my browser using only my email and password - which would give someone complete access to my account if they got my password.  How do I set this up?  I recall months ago having to respond to a text message, but now that is gone and I can get in with just a password.

[BellPatricia · Accepted solution]

Good afternoon @Aptic and thank you for reaching out 🙂

You will not always have to enter a verification when you log in, as we have attempted to minimize how often the one-time verification code is requested. If unusual account activity is detected during your log in, we’ll request a one-time verification code to make sure it’s really you logging in.

To learn more about MFA check out Multi-factor authentication for MyBell

Don't hesitate to post if you have any more questions.

@BellPatricia 

[Karen11112]

Please confirm if MFA is working correctly as my Bell mail has not asked for a code since the August 26th incident.

[WelshTerrier]

Good Day & Welcome.

Thank you for posting your question. Yes, MFA is working.

There have been a number of back-office enhancements & changes made to MFA security verification.

Are you experiencing any issues with being able to access your webmail or are you just checking in to see if MFA verification is working?

Are you having trouble signing in? If so, please clear your browser's cookies and cache and reset your password.

If you are experiencing any issues, we need for you to tell more in order to help you more.

Let us know.

Take care.

[Karen11112]

Hi,

Thank you for your response.  As mentioned since the August 26th incident there has been no MFA verification code sent to ensure my email has an added level of security. What back-office enhancements & changes have been made to the MFA security verification and how do these changes/enahancements effect customer funtionality? 

[BellNick]

Hi @Karen11112 
Thank you for your post and welcome to the Community.
Are you consistently and currently signed into your Bell email and if so, have you tried logging out and then logging back in to see if it prompts you for MFA or do you have to log in every time and it doesn't prompt for the MFA?
Looking forward to hear back.

[Karen11112]

Hi.

I have logged out and back in several times since the Aug 26th outage with no prompt for the MFA,,Thanks 

Alo cleared cache and re-booted my machine.

[BellNick]

Hi @Karen11112 
We'd like to take a closer look into this and have sent you a private message.
Please check your Messages within your profile avatar in the top right corner.
Unsure how to check or send a private message? See How to send a private message

[BellNick · Accepted solution]

Hi @Karen11112 
Upon hearing back from our team, there was a change made in mid August that if the device was marked as a trusted device, MFA won't come up for at least 30 days, due to the device being trusted.
If you're still experiencing this going into October, please let us know.

[Aptic]

I have not been asked for 2factor verification in 6 months.  

[BellNick]

Hi @Aptic 
In your initial post, you had inquired how to set up MFA. Since then, have you set up the MFA on your account? You can check this through your MyBell profile under the "Contact & multi-factor authentication information" section.

[Aptic]

it was working before, but then just stopped for the last few months.  I haven't been ask since.  Even when it was working, I don't recall actually setting it up, I thought Bell put it on automatically.  I would like to get it back working.

[Karen11112]

Hi, Thanks @BellNick 

Did the change occur on the Bell side and can the frequency be updated? I'll keep my eye on it over the next few weeks.

[BellPatricia]

Hey there @Karen11112 

Thanks for your reply 🙂

No the 30 day expiration isn’t customizable. By default, a device is "trusted" for a period of 30 days. Once this window expires, the system will trigger a new MFA challenge for security purposes. After you successfully authenticate, the 30-day timer resets.

One thing you can try is a password reset. That will automatically invalidate all currently trusted devices as a security precaution. and trigger the MFA request.

@Aptic When you log in to webmail with your username and password in a web browser, you would be prompted to set up MFA (if not already set up). Once set up, you will be asked to provide a one-time verification code. You can choose to receive this by either email or text message, depending on the methods you set up. Can you test a password reset and let us know if you are prompted with MFA? 

@BellPatricia 

[Mjpasquale]

Where is this change in the MFA shown in Bell’s web site (as per your link above)?  

Any written notifications to customers about the change?