Is two-factor authentication (2FA) now mandatory at Swisscom?

  • A person on the Swisscom hotline said that two-factor authentication (2FA) was mandatory. Another person said it was voluntary. What applies?

    Show original language (German)
    • @POGO 1104

      im Kundencenter kannst du die 2FA wieder deaktivieren. Im Punkt Login verwalten/Login Methode gibt es zwar keinen Punkt, der “2FA deaktivieren” heisst, nur deine erwähnten 2 Optionen “für alle Bereiche…” und “nur für geschützte Bereiche…”

      Wenn du aber die hinterlegte Natelnummer oben komplett rauslöschst, inkl. die Ländervorwahl, und danach unten auf “Weiter” klickst, ist die 2FA danach deaktiviert!


    @Loxiran wrote:

    A person on the Swisscom hotline said that two-factor authentication (2FA) was mandatory. Another person said it was voluntary. What applies?


    Most things still work at Swisscom without a stored telephone number.

    Individual things are only possible with Swisscom if you have a stored telephone number (e.g. activating and deactivating email forwarding to your Bluewin email account).

    Glotzologist

    Show original language (German)

    @Glotzologe wrote:


    @Loxiran wrote:

    A person on the Swisscom hotline said that two-factor authentication (2FA) was mandatory. Another person said it was voluntary. What applies?


    Most things still work at Swisscom without a stored telephone number.

    Individual things at Swisscom only work with a stored telephone number (e.g. activating and deactivating email forwarding to the Bluewin email account).

    Glotzologist


    I have already provided a telephone number. The question is whether logins are still possible without SMS two-factor authentication?

    Show original language (German)

    @Loxiran wrote:

    I have already stored a telephone number. The question is whether logins are still possible without SMS two-factor authentication?


    This is still possible without a stored telephone number or without SMS two-factor authentication.

    Glotzologist

    Show original language (German)

    @Glotzologe wrote:


    @Loxiran wrote:

    I have already stored a telephone number. The question is whether logins are still possible without SMS two-factor authentication?


    This is still possible without a stored telephone number or without SMS two-factor authentication.

    Glotzologist


    Swisscom claimed in the chat that it was mandatory. It’s tiresome how much nonsense is said.

    Show original language (German)

    So I think you’re starting to calm down now! When I look at your history in the forum, I’m surprised that you’re still with Swisscom and haven’t quit long ago? You’ve already gotten answers regarding 2FA. It is not mandatory, with a few exceptions. Depending on what you asked, the answer to whether it is mandatory could be yes or no. But don’t make such a big fuss about it now!

    Show original language (German)

    @Samsi wrote:

    So I think you’re starting to calm down now! When I look at your history in the forum, I’m surprised that you’re still with Swisscom and haven’t quit long ago? You’ve already gotten answers regarding 2FA. It is not mandatory, with a few exceptions. Depending on what you asked, the answer to whether it is mandatory could be yes or no. But don’t make such a big fuss about it now!


    What are the few exceptions where 2FA is mandatory?

    Show original language (German)
    • WalterB has responded to this post.

      @Loxiran

      The system may still require two-factor authentication in the following cases:

      • for particularly sensitive data or call forwarding
      • in the event of unusual login attempts and/or frequent login changes in a very short time
      • when accessing from unknown devices or suspicious IP addresses

      In other words, if the system suspects that access is being misused by third parties, 2FA can be used for security reasons, even if it is deactivated.

      Show original language (German)

      @Samsi wrote:

      @Loxiran

      In the following cases, the system may still require two-factor authentication (2FA), for example:

      • for particularly sensitive data or call forwarding
      • in the event of unusual login attempts and/or frequent login changes in the shortest possible time
      • when accessing from unknown devices or suspicious IP addresses

      Then does this mean that 2FA is mandatory when logging into Swisscom’s PWLAN?

      Show original language (German)

      @Loxiran

      It depends… If the PWLAN says “Swisscom Autologin”, you as a Swisscom customer will automatically be able to access the Internet. As far as I know, a security certificate is used when connecting, so 2FA is not necessary in this case. If it says “Swisscom” or something else like Migros Wifi etc., then you have to register with an SMS code.

      This is particularly useful for people who do not have unlimited data or are staying in Switzerland as a tourist.

      Show original language (German)

      @Samsi wrote:

      @Loxiran

      It depends… If the PWLAN says “Swisscom Autologin”, you as a Swisscom customer will automatically be able to access the Internet. As far as I know, a security certificate is used when connecting, so 2FA is not necessary in this case. If it says “Swisscom” or something else like Migros Wifi etc., then you have to register with an SMS code.

      This is particularly useful for people who do not have unlimited data or are staying in Switzerland as a tourist.


      I actually already have a network connection. At the same time, if the 4G connection is/becomes too poor, I prefer to log into the WLAN. At Migros, this is done via the Migros account. In the Coop I choose my SwisscomLogin. Then there was an error message regarding the Swisscom certificate. From then on, the request to activate 2FA constantly appeared. So it’s mandatory? After a few login attempts I still managed to log in.

      Show original language (German)

      @Samsi wrote:

      @Loxiran

      It depends… If the PWLAN says “Swisscom Autologin”, you as a Swisscom customer will automatically be able to access the Internet. As far as I know, a security certificate is used when connecting, so 2FA is not necessary in this case. If it says “Swisscom” or something else like Migros Wifi etc., then you have to register with an SMS code.

      This is particularly useful for people who do not have unlimited data or are staying in Switzerland as a tourist.


      I now spoke to Swisscom again, this time a person from Switzerland was on the line and not the German call center. Luckily, I wasn’t forced into a sales pitch.

      NEW 2FA is mandatory for all customers!

      NEW all customers must also provide their ID!

      Show original language (German)

      I’m currently trying to imagine how Swisscom would require all ID cards from 1.4 million home internet customers and at the same time oblige everyone (perhaps as part of a promo :-)) to have a mobile phone subscription in order to be able to manage their home network connections 🙂

      It actually all sounds pretty unlikely and, apart from the lack of a legal basis, implementation would also be rather impossible.

      Maybe you just shouldn’t believe every piece of information.

      Show original language (German)

      Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

      @Samsi

      I don’t have any reliable information on the subject of the title myself, I’m just evaluating the probabilities of scenarios here.

      From my experience, I’m usually not wrong, at least I mean a hit probability of well over 50% 🙂

      Show original language (German)

      Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom


      @Samsi wrote:

      @Werner

      Uh uh, now he’s going to come and say he’s received false information from Swisscom again?

      It’s starting to get ridiculous and I’m not taking it seriously anymore, sorry.


      Sorry, that’s the bottom drawer now.

      1. The Swisscom person said in the chat that 2FA was mandatory.

      2. This was refuted by an apparently incompetent person on the Swisscom hotline.

      3. I had a good contact today, this person confirmed this to me with the duty.

      Show original language (German)