Multi-factor auth

[mkhuffman]

So if someone has your phone and can get into the car, they can start it anyway.
Also, having to pull out your phone and push a button sounds suspiciously like using the key fob on most cars, WHICH IS WHAT THEY SHOULD HAVE DONE TO BEGIN WITH AND SPARE US FROM THIS TERRIBLE LOCK SYSTEM. My Audi works perfectly (better). Grab the handle to unlock or lock. No Vampire drain.

Feels like the inclinometers that stop measuring at just the angle where we start to need them. Why??

If somebody has my phone, they will not be able to drive my truck because my phone is locked. It's always locked unless I am using it. I suppose they could pull a gun and steal my phone while I'm in the middle of using it and keep it awake until they can get in my truck, but that's a huge stretch.

I always have my phone out of my pocket and usually it is attached to the magnetic phone mount I have on my dash. It's so easy because my phone is right there right in front of my face every time I drive the truck.

I suppose if you don't pull your phone out every time you get in like I do, it could be a hassle. But not for me. It's my normal process to have my phone out and in my hand when I get in my truck.

Sponsored

 

[mkhuffman]

Lol. Many people carry a key card in their wallet (hence the credit card shape of the card) so that if they don't have their phone they can still get in and operate their vehicle. Enabling MFA eliminates this safety net. So the net effect is that if you enable MFA you can create more space in your wallet and replace it with extra cash to help you figure out how to get home.

This is a good point. I also have a key card in my wallet and so now that key card isn't really a good backup. But I have never had to use it. Of course, I only had the truck for 3 months so there's that.

As has been pointed out before, having the app set up on another phone is a good practice in case of emergency. I happen to have a spare phone I could do that with.

In fact, I'm probably going to do that this weekend so that I have a backup. I can also put it on my wife's phone, which I haven't done yet. She is going to love MFA to drive. Lol.

 

[CANCERDOC]

It would not be vastly easier than pressing one button on your phone. It would be vastly harder and take vastly longer to enter a pin code every time I want to drive. And very annoying.

I am serious. I unlocked my phone with my biometrics and pressed one button. So easy.

A pin code will be at least 4 digits, but much longer for it to be secure. My Mach-e had a password which I could never remember because it was so long and I so rarely used it.

No two step access method will be faster or easier than how Rivian implemented it. And I know because I have actually used it. I recommend you try it out before you crap all over it.

Because not everyone has their phone on them, and this prevents the use of the vehicle using the fob or the keycard by someone who is not the owner - i.e. lending the vehicle to someone or dropping it off for valet parking or a service center visit. You'd have to reminded to turn off this feature in the app prior to dropping off the vehicle. Having a pin on the screen would be so much easier.

 

[bigsky]

For those that are happy with MFA, great I am happy for you. For the rest of us, even if we are in the minority, why NOT implement PIN to drive? It would be vastly easier than MFA.

Why not give the user the choice?

I'll say why not just do it right!!?
Rivian does great things. This MFA Rivian approach, is the poster child for WTH, WTF's wrong with you, Rivian!?

 

[tate16t]

Because not everyone has their phone on them, and this prevents the use of the vehicle using the fob or the keycard by someone who is not the owner - i.e. lending the vehicle to someone or dropping it off for valet parking or a service center visit. You'd have to reminded to turn off this feature in the app prior to dropping off the vehicle. Having a pin on the screen would be so much easier.

I turn off the Pin in this case too…on my wife’s Tesla. I don’t want to share the pin.

 

[Revelation]

It would not be vastly easier than pressing one button on your phone. It would be vastly harder and take vastly longer to enter a pin code every time I want to drive. And very annoying.

I am serious. I unlocked my phone with my biometrics and pressed one button. So easy.

A pin code will be at least 4 digits, but much longer for it to be secure. My Mach-e had a password which I could never remember because it was so long and I so rarely used it.

No two step access method will be faster or easier than how Rivian implemented it. And I know because I have actually used it. I recommend you try it out before you crap all over it.

Wow you took "vastly easier to implement" to "easier for you to use." Posters on this forum seem to have a hard time actually reading what people type.

Yes, it is vastly easier to implement PIN to drive than MFA. Whether you think one is easier to use versus the other is a different discussion. I would like Rivian to implement PIN to drive.

There are countless reasons or scenarios where having MFA enabled will prevent you from driving. Would the regular user ever experience one, maybe and maybe not. I always carry a gun. Will I ever have to use it, statistics say I won't - hope that is right. I carry none-the-less.

I also have fire extinguishers. The chances of me experiencing a fire are next to zero. Yet... I still have them just in case.

 

[tate16t]

I'll say why not just do it right!!?
Rivian does great things. This MFA Rivian approach, is the poster child for WTH, WTF's wrong with you, Rivian!?

This is not Rivian’s implementation of MFA, it’s how MFA works in general across many organizations that use it today. The only Rivian specific implementation is adding MFA to the vehicle and calling it MFD. It has risks, I get it and you’re not required to use it. Losing your phone is a very small risk. I have never lost or misplaced my phone and had many in my 40 yrs.

 

[Singletracker]

All I gotta say Is, “Really?!” Attached is what the owner’s guide has to say about the new MFD. The guide even tells you what to do if it doesn’t work the first time. Honestly, that doesn’t sound very encouraging. Hope you’re not in an hurry. And, what happened to being able to use a watch? Is anybody really going to use this feature? Will this be another potential for a software glitch that leaves you stranded. Seems like too many what if scenarios surrounding MFD. Maybe this will turn out to not be as bad as it sounds, but…….

Having said all that, I guess it could be useful in a situation where the owner felt particularly vulnerable, as it does appear easy to turn on and off. Still like the PIN idea for daily use, however.

 

[COdogman]

I really don’t understand the complaints about this. Rivian is offering you additional security IF you want it. You don’t have to use this feature if you don’t want to. Rivians are not being stolen, so you can freely choose to use it or not.

Be glad you don’t drive a cheap 2022 Kia or Hyundai

 

[tate16t]

All I gotta say Is, “Really?!” Attached is what the owner’s guide has to say about the new MFD. The guide even tells you what to do if it doesn’t work the first time. Honestly, that doesn’t sound very encouraging. Hope you’re not in an hurry. And, what happened to being able to use a watch? Is anybody really going to use this feature? Will this be another potential for a software glitch that leaves you stranded. Seems like too many what if scenarios surrounding MFD. Maybe this will turn out to not be as bad as it sounds, but…….

Having said all that, I guess it could be useful in a situation where the owner felt particularly vulnerable, as it does appear easy to turn on and off. Still like the PIN idea for daily use, however.

It’s not uncommon for an MFA implementation or D in this case to offer alternative methods. The time-based code is a backup method for authentication if the network is down or if you’re unable to receive a push notification. Networks go down, this is no fault of Rivian’s and I think it’s a responsible approach.

 

[iansriv]

If somebody has my phone, they will not be able to drive my truck because my phone is locked. It's always locked unless I am using it. I suppose they could pull a gun and steal my phone while I'm in the middle of using it and keep it awake until they can get in my truck, but that's a huge stretch.

I always have my phone out of my pocket and usually it is attached to the magnetic phone mount I have on my dash. It's so easy because my phone is right there right in front of my face every time I drive the truck.

I suppose if you don't pull your phone out every time you get in like I do, it could be a hassle. But not for me. It's my normal process to have my phone out and in my hand when I get in my truck.

I have an extra phone for international travel and calls. That one does not have access to my cars or anything important. Both phones are always with me. If I was in a situation where I had to hand over a phone-it would be the "burner."

 

[azbill]

I rarely carry my phone. Give me a key to start the car then. This is one of the dumbest things I have heard of. Will they buy my truck back.

My wife only uses the fob, and does not even have the Rivian app on her phone. I would never turn this on. I always carry the keycard as my backup to the phone.

 

[azbill]

SO many threads hard to keep up.

Yea MFD isn't for me, and that's OK. Honestly would prefer a Non-Bluetooth solution to passive entry as well. My Audi had an RF remote, and touch sensors on every door handle. Just had to be close to the car, and touch it and it would open for you. Worked 99.99% of the time for 3.5yrs without delay. Only time it didn't work was when the battery in the fob died. Was able to extract the physical key from the fob, and place it in the hidden slot on the drivers door handle and gain access. I really think Audi's system is a masterclass in how to handle passive entry and drive access. It's the appropriate balance of speed and security in terms of access.

GM vehicles have the exact same system as Audi. And Ford uses a pin as a backup to unlock doors, and a second pin inside the vehicle to drive, in case of a phone failure.

 

[mkhuffman]

Yesterday's experience with MFA was not as good as before, so I am moderating my opinion somewhat. I still like it, and I still plan to keep it on, but it took more than a few steps. I had to open the Rivian app and pull the screen down to get the window to pop up to authorize the drive.

I still prefer this process over entering a PIN on the display, which to me isn't much more secure than PaaK without MFA, and a PIA to do every time. Just my preference, of course.

I used the MFA PIN method yesterday also, and that definitely took more steps than a simple PIN would. I think a great backup would be the use of MFA PINs generated by other apps, like the Microsoft Authenticator app.

BTW, that old phone I planned to use as backup MFA is too old to install the Rivian app. It is at Android 10, and Android 13 is the minimum required. I may purchase a new, cheap phone, used or whatever, to have a backup. In the meantime, I still need to put the app on my wife's phone in case I have an emergency situation with my phone.

 

[tate16t]

Yesterday's experience with MFA was not as good as before, so I am moderating my opinion somewhat. I still like it, and I still plan to keep it on, but it took more than a few steps. I had to open the Rivian app and pull the screen down to get the window to pop up to authorize the drive.

I still prefer this process over entering a PIN on the display, which to me isn't much more secure than PaaK without MFA, and a PIA to do every time. Just my preference, of course.

I used the MFA PIN method yesterday also, and that definitely took more steps than a simple PIN would. I think a great backup would be the use of MFA PINs generated by other apps, like the Microsoft Authenticator app.

BTW, that old phone I planned to use as backup MFA is too old to install the Rivian app. It is at Android 10, and Android 13 is the minimum required. I may purchase a new, cheap phone, used or whatever, to have a backup. In the meantime, I still need to put the app on my wife's phone in case I have an emergency situation with my phone.

Why did you need to open the app to approve the MFD request?

I have not tried the backup PIN option but I figured it would not be as easy as entering a PIN on my wife’s Tesla. It’s not the same approach. Tesla’s PIN is based on what you know and not time-based and not a random generated PIN, like MS Authenticator. This is the typical MFA approach which is more secure.

I’m on the fence as to whether I will use this feature. I believe having to rely on a second phone goes a little too far. Maybe I will install it on my wife’s phone. But also think losing my phone is a stretch since this has never happened.

Sponsored