topic Re: Update - SSA Email received in Community Chat

Update - SSA Email received

qvcfreak — Mon, 01 Aug 2016 14:02:01 GMT

I'm sorry I couldn't locate original post but my cousin text me this morning with the following response

Re: Update - SSA Email received

millieshops — Mon, 01 Aug 2016 14:09:12 GMT

@qvcfreakok - to a number you've already given them, I assume?

My bank does that - and so do some of the utility companies. I didn't know SSA does it, too, but it makes sense as long as you know you already agreed to be contacted that way.

Re: Update - SSA Email received

LTT1 — Mon, 01 Aug 2016 14:14:55 GMT

@qvcfreak@millieshops

I paid a lab bill by text the other day! First time for me for paying this way. I agreed to receive the text.

Still, with all of the concern about identity theft, I am kind of surprised that a governmental agency such as SSA would do business this way.

Re: Update - SSA Email received

Stray — Mon, 01 Aug 2016 14:15:08 GMT

I believe you do this if you agreed to an extra layer of security...you opt in or have a choice not to do the text as everyone doesn't text, may not have vision or manual dexterity to do so or have phones with that option...therefore there is choice rather than exclude a whole block of people who need important information and help.

Re: Update - SSA Email received

Marp — Mon, 01 Aug 2016 14:19:56 GMT

Since the original thread on this subject has dropped way down I'm copying information here for any that may have missed it. (emphasis added by me)

From: https://www.ssa.gov/myaccount/MoreInformationAboutMFA.html

More About Multifactor Authentication (MFA)

Beginning in August, the Social Security Administration (SSA) will add an extra layer of security for our customers when they interact with us online using the my Social Security suite of services. my Social Security account holders will be required to use their cell phone, in addition to their username and password, as an additional authentication factor during online registration and every sign in.

We are implementing multifactor authentication (MFA) to comply with Executive Order 13681, which requires federal agencies to provide more secure authentication for their online services. We are committed to using the best technologies and standards available to protect our customers’ data. MFA is just one of the ways we ensure the safety and security of the resources entrusted to us. Since we launched my Social Security in May 2012, we have provided this added security of MFA as an option to our customers.

All new and current my Social Security account holders will need to provide a cell phone number able to receive text messages. People will not be able to access their personal my Social Security account if they do not have a cell phone or do not wish to provide the cell phone number. We expect to provide additional options in the future, dependent upon requirements of national guidelines currently being revised.

Account holders will use their username, password, and a security code we send to the cell phone number to access their personal my Social Security account. The use of a text message security code is common with many institutions. Also, the security code we send to my Social Security account holders is only valid for 10 minutes, providing additional security to our customers.

Our collection of the cell phone number is only for the purpose of sending the security code to help complete the sign-up or sign-in. We will not share your cell phone number, nor will we use it for any other purpose unless you explicitly authorize such use. We understand that not everyone may have a cell phone or wish to share their cell phone number. You may be wondering why we are using the text message method. We implemented the text message feature for very important reasons:

The text message option has been a feature in my Social Security since its launch in May 2012. Making this functionality mandatory allows us to comply with the executive order and use a reliable method of MFA for our almost 26 million current account holders.
We are limited to text messages for the initial MFA implementation due to technical and resource constraints, but we expect to provide additional options in the future.
We understand that not everyone may have a cell phone or cell service. However, research shows that an overwhelming majority of American adults have cell phones and use them for texting. This is our first step in adding security, and we expect future enhancements will provide other options.

We encourage our customers who will not be able to access their personal my Social Security account without a cell phone to visit our website at www.socialsecurity.gov/agency/contact to learn about other ways to contact us to access their benefits information.

Our decision to use the text message feature to comply with the executive order helps protect our customers’ personal information. SSA is committed to providing our customers with convenient and secure online access to their personal information, helping secure today and tomorrow for our customers.

Re: Update - SSA Email received

nomless — Mon, 01 Aug 2016 14:22:41 GMT

@qvcfreak, thanks for confirming that the content of the email was correct and logging into an SSA account will require use of a code from now on. The use of a code to increase security is reasonable, but I wish they would provide options for how to send it instead of doing it cell only. Oh, well.

Re: Update - SSA Email received

nomless — Mon, 01 Aug 2016 14:26:11 GMT

@Stray wrote:
I believe you do this if you agreed to an extra layer of security...you opt in or have a choice not to do the text as everyone doesn't text, may not have vision or manual dexterity to do so or have phones with that option...therefore there is choice rather than exclude a whole block of people who need important information and help.

No, it's no longer a choice, it's required. If one doesn't have a cell phone, SSA business cannot be conducted online any more, it has to be done via phone or a visit to the local SSA office

Re: Update - SSA Email received

Stray — Mon, 01 Aug 2016 14:27:51 GMT

@Marp- thank you for posting....I don't go to the site often but last time I was there it was voluntary and I didn't sign up. This will be hard for many living alone or disabled; the alternatives may require you to leave the home I guess? I imagine the hacking into the SSA/IRS databases prompted this?

Re: Update - SSA Email received

Stray — Mon, 01 Aug 2016 14:31:57 GMT

@nomless- yes, I saw @Marp posting....it will be hard or time consuming for some but I'm not against extra security. We are so accustomed to convenience as opposed to security. But, severely disabled do mostly everything online because it makes life so much easier.

Re: Update - SSA Email received

qvcfreak — Mon, 01 Aug 2016 14:32:30 GMT

You are very welcome everyone , I'm just happy I had someone working there that could answer our questions. Have a great day!!

Re: Update - SSA Email received

nomless — Mon, 01 Aug 2016 15:10:08 GMT

@Stray wrote:
@nomless- yes, I saw @Marp posting....it will be hard or time consuming for some but I'm not against extra security. We are so accustomed to convenience as opposed to security. But, severely disabled do mostly everything online because it makes life so much easier.

Yes, extra security is good, but cell phone only will be a hardship for some. Many don't have a cell or incur charges when texts are received.

Re: Update - SSA Email received

excpa — Mon, 01 Aug 2016 15:19:29 GMT

Extra security? Really? Extra cost, more likely. Well, that's another government service I'm paying for that I won't be using.

Re: Update - SSA Email received

athenian — Mon, 01 Aug 2016 15:27:49 GMT

I have a feeling this is one rule that will be rescinded. I'm not sure how well thought out it was considering their customer base. I have a cell, but rarely use it and do not consider it secure.

Re: Update - SSA Email received

millieshops — Mon, 01 Aug 2016 15:28:18 GMT

Maybe it's found to be safer than snail mail?

Still - when I get one of those codes so I can sign in somewhere, I delete it immediately with hopes it's really gone. I know the ones I've received can be used only once and then within limited time. If you don't use it quickly, then you have to ask again and you get a different code.

Re: Update - SSA Email received

SharkE — Mon, 01 Aug 2016 19:20:26 GMT

Long wait getting in everybody is rushing to get in !!!!!!!!!!!!!!!

I'll wait till crush is over !

Thanks for the update !

Re: Update - SSA Email received

chickenbutt — Mon, 01 Aug 2016 19:23:45 GMT

Thanks for the info. I occasionally check my old emails (I recently changed ISPs and made new email addresses for that one) and saw that my old email address got that email. I just deleted it. I should probably go to SSA and update my info.

Not only do I NOT text anyway, but I don't give out my cell phone number to hardly anyone, so I wouldn't be sharing that info anyway.

Re: Update - SSA Email received

Stray — Mon, 01 Aug 2016 20:07:32 GMT

@nomless wrote:
@Stray wrote:
@nomless- yes, I saw @Marp posting....it will be hard or time consuming for some but I'm not against extra security. We are so accustomed to convenience as opposed to security. But, severely disabled do mostly everything online because it makes life so much easier.

Yes, extra security is good, but cell phone only will be a hardship for some. Many don't have a cell or incur charges when texts are received.

@nomless- I agree there are some people in my condominium who live alone, no family, don't have cell phones or very basic ones with no texting. It will be very difficult for severely disabled people, poor or no vision....I realize there are other ways to get the information and maybe very easy for fully abled people and/or those with friends/family but everyone doesn't have the same situation and computers opened a whole new world for the disabled. It's the governments answer re their inefficiency in protecting our info....so we pay the price instead of the government hiring experts and developing tighter security measures and policies....

Re: Update - SSA Email received

Stray — Mon, 01 Aug 2016 20:08:43 GMT

@athenian wrote:
I have a feeling this is one rule that will be rescinded. I'm not sure how well thought out it was considering their customer base. I have a cell, but rarely use it and do not consider it secure.

@athenian- I agree....it's discriminatory and there will be some action by guardian groups, I'm sure.

Re: Update - SSA Email received

LTT1 — Mon, 01 Aug 2016 22:08:32 GMT

@athenian@qvcfreak@Stray@chickenbutt@SharkE

Here comes the "Conspiracy Theorist" (me)....

Don't you think it is odd that the govt needed security codes for iPhones and Microsoft practically REQUIRED Windows 10 AND Medicare now wants to use text for secure connections?

I joined Twitter and never could figure out how they got my cell phone number! Now, at 2am my notifications sound off "such and such started following you!"

These entities who now want to follow me, usually are selling something 😀

Re: Update - SSA Email received

SharkE — Mon, 01 Aug 2016 22:33:36 GMT

Sheesh, now, every time you want to access your information you have to answer yes, this is my cell phone # then ,they SEND YOU A NEW CODE EVERY TIME. I thought it was gonna be a one time code to be used forever.

Nope, the code changes. course, how often do you check it? We hardly ever do anyway and we keep cell phones turned off all the time anyway, so, it won't bother us.