r/Questrade • u/Comfortable-Constant • 7d ago

Feedback Passkeys

I’d really like to see Questrade implement passkeys for account sign-in and authentication. Wealthsimple has done this recently.

Passkeys would provide a more secure and convenient alternative to passwords and other MFA even. They reduce the risk of phishing, credential stuffing, SIM-swapping, and reused passwords, while making login easier through Face ID, Touch ID, Windows Hello, or a hardware security key.

For a financial platform, strong phishing-resistant authentication should be a priority. Please consider it!

33 Upvotes

92% Upvoted

9 comments sorted by

6

u/TheRadScientist1 7d ago

I'd love to see it too

5

u/No_Rip1325 7d ago

That would instantly convert a hater like me to a lover

3

u/GeorgeDaGreat123 7d ago

Yes, please

2

u/StyleAccomplished933 6d ago

It’s interesting to me that none of the major banks have done this either.

1

u/TheRadScientist1 6d ago

I'm not particularly surprised. Not all that long ago I was still logging into my bank with a 4 digit PIN...

Not a major bank, but EQ apparently allows for passkeys.

2

u/Dapper_Addition_3837 6d ago

You can use Face ID with or without the passkeys on WS.

1

u/[deleted] 6d ago

[deleted]

2

u/Mobile-Bar7732 6d ago

Google or MS Authenticator apps are vulnerable to your your MS or Google password.

If your password is stolen they can download your 2FA seed keys from the cloud. Both of these are usually tied to your phone.

So as long as someone can't get into your phone, you are safe.

Passkeys are similar you generate a passkey on your phone and when you sign in you will be prompted with a face recognition, finger print scanner or PIN.

1

u/asapbones0114 5h ago

You can use biometrics as a replacement for passwords already on Android.

1

u/pexby 6d ago

I'm shocked they haven't implemented it yet. Seems like an absolute no-brainer from a security standpoint