[robocat]

> separate 2FA device

FYI in New Zealand a few banks can provide a device (e.g. RSA SecurID) for proper non-bank 2 factor auth with consumer accounts. However some major banks only use phones for 2FA (app or SMS).

The norms seem to vary considerably depending on country.

[PostOnce]

Which banks provide a device?

[robocat]

I have had SecurID tokens for ASB and SBS accounts. I have been told Westpac does not provide secure 2FA. I am not sure about other banks.