[downut]

With a touch login on the phone and (say) google authenticator IMHO it's considerably less inconvenient to login into something online with the desktop than what Chase does to me. The phone is sitting right there anyway, and 6 digits to type in by hand is not that big a deal. I do it all the time.

Basically the phone is the 2FA generator.

[downut]

Does "the app" mean the site's app?

[alpaca128]

I mean the bank's phone app. It is locked to one specific device and is the only possible method of authentication. I either need to use the app itself, or confirm every login and transaction in the app when using a browser.