03-23-2013 01:15 AM
I am adding CIM to my account and will use it for recurring billing.
With CIM in place, I have heightened concerns about the vulnerability of the Authorize.net merchant login portal. If somebody breaks in with a bad intent they could do a lot of more damage now (like creating transactions) than what was possible before. We use best security practices to protect passwords but this is not sufficient in my opinion.
Is there any way to require more secure access to the Authorize.net portal (like two factor authentication or IP restricted ?)
03-27-2013 02:13 PM
Authorize.Net does not currently offer 2-factor authentication or IP address access restrictions. We enforce a strict password policy and encourage you to follow the best practices outlined in that policy found here: http://www.authorize.net/resources/files/PasswordPolicy.pdf.
01-24-2015 07:53 AM
Is there any update on this?
We use CIM as well. With such valuable information on hand there seems like quite a bit of potential for damage.
We've ensured that all other elements of our billing system require 2-factor authentication. Would be very nice to see this on top of the password policies that you enforce.
12-22-2017 06:11 AM
I opened this request for two-factor authentication almost 5 years ago! and also entered in the "Ideas" section:
It was marked as 'accepted' but nothing happened.
It is 2018, how can a portal to control payments and credit cards rely solely on username/password ? This is reckless.
02-27-2020 06:39 PM
So the enhancement was planned for 2018 according to the latest post, and we are in 2020. I opened the request 7 years ago.
In the meantime, many websites have two-factor. Even my daughter's school website has two-factor available. It's so easy to implement with many kits available, for example from Twilio.
I am a fan of Authorize.net, but we may walk out because compliance absolutely requires two-factor. Please get your act together!