We have a website where users authenticate with a username/password and also have the option of switching on two factor authentication

One of the options they have in our application is to amend their home address which is then immediately updated on our back-office database

One client has asked for an extra later of security (their words, not mine) for when the user does this.

We've discussed sending a PIN to the mobile number or email we have recorded for the user, - I was wondering what others have implemented (if anything at all!)

Feels a little overkill to me as they are not changing bank details or any sort of payment instruction



From a UX perspective - not a security perspective - you want the customer to feel comfortable with your site. Having them "feel" secure is important. The home address may, or may not, be valuable information worth protecting to you but safe keeping of data is valuable to lots of users.

Allowing users to opt-in to 2FA (two factor authentication) is a simple way for keeping security-conscious users feeling comfortable using your site.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.