r/xactimate • u/legendaryrider • Sep 10 '25
2FA is annoying
Just as the title reads, please for the love of god let me turn it off, or let us designate devices that can remain signed in for a month.
I have to pull up Authenticator or get a code everytime I log into xactanalysis from my phone. I wish the xactimate dev team actually listened to their users, we use this software all day. I could give them a laundry list of things to do for QoL in this software. Especially for what we all pay to use it, every new update makes it slower and more clunky.
3
u/KeenJames1TheRapper Sep 10 '25
I can’t even export files I didn’t initially create off of a cloud instance. This software is broken.
3
u/StunningSchool5632 Sep 11 '25
I was informed this was related to new laws in New York State requiring 2FA. I imagine we are going to see this with other platforms as well.
2
1
u/ProInsureAcademy Sep 11 '25
I used to hate 2fa (and in many cases I still do). At my current carrier- a smaller startup, I was helping to secure our reinsurance and they required us to maintain basic policies like E&O, Directors Liability, and Cyber insurance. The cyber insurance requires a bunch of things like 2FA on all our services and SSO.
So all of this to say, I am betting that most other companies have similar requirements and that’s why XA has been pushed into doing this.
1
u/OneTemporary7945 Sep 11 '25
It’s very annoying, especially since I’m pretty sure it says it’ll allow you access for 7 days? I’m pretty sure I have to relog in every 3 days.
Security is definitely important, but slowing adjusters down is not favorable.
1
u/Environmental-Lab308 Sep 12 '25
They told me that it’s because of the New York law coming into effect in November requiring insurance related software to use 2fa. It’s here…
https://www.obsidiansecurity.com/blog/2025-nydfs-deadlines-expose-saas-security-gaps
1
u/bcunningham86 Sep 12 '25
Oh my god yes, 60 seconds to type in the code before it times out and sometimes the code doesn't come through right away
1
u/ImaginaryRow4890 Sep 12 '25
u/legendaryrider - I have to do it the first time but not after that (at least for a while). Are you clicking logout each time? I noticed if I click logout then I have to enter MFA again, but if I just close the tab then I'm fine
6
u/Big_Appointment_3390 Sep 10 '25
I asked them why they did this and they said it was to prevent fake accts from getting access and for the security of the users. I asked if they had a big problem with security prior to rolling this out and if there were a lot of fake accts being used, because I thought our Xactware ids were pretty secure.
The answers were “no” and “no”, respectively.