[smileybarry]

Yep, while I like moving all snail mail to email, I hate that (almost) every single service now just sends a "monthly/quarterly report now available in your account area!" email. A rare few of them at least offer the option of just sending it attached (with the default being a useless reminder email), but most are essentially a chore, because nearly everything here uses phone+2FA as login rather than a password or passkey.

[OptionOfT]

For that reason I actually have decided to get everything via snail-mail.

When BofA sends me a new statement I need to:

    * click on the link in my inbox
    * wait for the email-provider to scan the email (and Office 365 does sometimes tell me they can't scan the link)

(either)

    * Enter my username & password
    * Select that I want my 2FA via call or text
    * Wait for the call or text to arrive
    * Enter it (now I'm signed in)

(or)

    * search my house for my YubiKey
    * lean over to insert YubiKey
    * click cancel on the Windows popup for the passkey
    * click cancel on the Bitwarden popup for the passkey
    * click Physical key on the Chrome / Edge popup for passkeys
    * put in YubiKey pin
    * lean over again to physically touch YubiKey

(end)

    * Click no on the next credit card offer
    * Navigate to Credit Cards
    * Click the Credit Card
    * Click Documents
    * Click current statement

or

when I'm on my walk (which I do anyway)

    * insert key in mailbox
    * (no delay) open mailbox
    * (no delay) take out letters
    * (no delay) close mailbox
    * (no delay) remove key
    * walk home
    * open statement
    * validate statement
    * trash statement

Even with passkeys there are too many where the flow can / purposefully is interrupted.

[LexGray]

Passkey does seem like it should include functionality to encrypt and sign all email and SMS automatically. A missed opportunity.

[fn-mote]

> because nearly everything here uses phone+2FA as login

Here in the US we only wish things were that secure.

Unless by 2FA you mean “code sent via SMS”.

[smileybarry]

Sadly I mean "code sent via SMS", which is one reason why I haven't automated much of the retrieval for these things.