Comment by ezekg

Sort of off-topic -- but related to "they would never request that" -- recently, I reached out to Hover's support due to a billing issue. The support agent eventually asked me for my 2FA code and I literally sat back in my chair and mumbled "...what?" I told them, "absolutely not." Then I told them that typically, they would request access and then I would have to approve it. They then proceeded to follow protocol. This agent was literally asking to take over my account, and I guess they can bypass passwords but not 2FA. I know Hover != $Bank, but regardless, it made me very uncomfortable and has me second guessing Hover's security practices.