Is FF's private browsing setting causing the login site to always ask to send a confirmation code. It happens when I start a whole new session clearing out cookies etc. It acts like I'm logging in for the first time. This code is only supposed to be a one time thing. But every time I log-in at a different day the site asks for a confirmation code to be entered and then I have options to which it sends me this code. i.e. to my phone or email.
The problem is that you are clearing your cookies, where the code is stored....when you delete them, to your banks website, this is your first visit..
The whole point of in-private browsing is that it deletes any record of the actual session when the session is ended. As any cookies that the site uses to facilitate storing personal details will be deleted at the end of the session this is working correctly in your case.
you have to decide if the problems of using in-private are outweighed by the advantages. If you are on a shared computer I would suggest that this is so - less so if you are on a personal machine that you have password protected
Well it's odd because I don't recall having this problem before. Because I would always delete cookies and so on when I close my browser. It wasn't until my bank was bought out and the new bank changed everything over to their server and interface that this problem came up. So is it only the private browser setting or what about if I set to clear history when FF closes and uncheck the private browsing session?
Some banks record your ip address(?) so it knows you are using the same computer for your transactions. If you log in from a different computer than you usually do (from a different physical location), it will prompt you for comfirmation of identity. This prevents people from accessing your account from a computer you usually dont use - thus making it more secure. If you are browsing through a proxy or maybe secure browsing prevents sites from id'ing your computer, then it is as if you are using a different computer that it doesn't know.
I dont know if you will run out of log-ins this way, but I would prevent an account that has logged in from 200+ different computers if I was in charge of security....
Edit: from personal experience, I have never had this happen after deleting cookies, only when using a different computer.
I contacted my bank via email and they had me put a wild card into their web address on my exceptions list in my browser and that seemed to solve it. so it was https://*.bankname.com
Quote