Receiving "Your Rivian Authentication Code Is . . ." text messages

[Yossarian]

Over the past several days, I've been getting text messages from Rivian with the expected, normal verbiage as follows:
Your Rivian Authentication Code Is ######

This code will expire in a few minutes. Do not share it with anyone.

@rivian.com # ######

The worrisome issue is, I haven't done anything that should trigger the text. I do have two-factor authorization enabled, but had/have not tried to log into my account. This has happened at least four times over the past three days, and twice today. I phoned Rivian CS who tell me they've noted and escalated my issue, and said basically not to worry about it. After the second instance today - just about 30 minutes ago - I phoned again and got basically the same response. I pressed the rep a bit and asked if the issue is unique to me, or something that others are also reporting. He assured me that it was not a security issue, and said he thought that others were affected, but he wasn't certain and could offer no information on how widespread it may be.

Has anyone else experienced this? With all the hacking and security breaches these days, this is a bit unnerving.

Sponsored

 

[Osyras]

Do you use teslafi or anything like that? It may be it doesn't have the 2fa code. Failing that - change your password asap!!!

 

[tate16t]

You should change your password and enable 2FA.

 

[mkg3]

Over the past several days, I've been getting text messages from Rivian with the expected, normal verbiage as follows:
Your Rivian Authentication Code Is ######

This code will expire in a few minutes. Do not share it with anyone.

@rivian.com # ######

The worrisome issue is, I haven't done anything that should trigger the text. I do have two-factor authorization enabled, but had/have not tried to log into my account. This has happened at least four times over the past three days, and twice today. I phoned Rivian CS who tell me they've noted and escalated my issue, and said basically not to worry about it. After the second instance today - just about 30 minutes ago - I phoned again and got basically the same response. I pressed the rep a bit and asked if the issue is unique to me, or something that others are also reporting. He assured me that it was not a security issue, and said he thought that others were affected, but he wasn't certain and could offer no information on how widespread it may be.

Has anyone else experienced this? With all the hacking and security breaches these days, this is a bit unnerving.

I've had the exact same thing happening to me.

Don't know why.

Only started happening since Rivian sent 2FA requirement letter and I did so.

 

[VSG]

Are you using the same username/password as on another site? If one got compromised, then those can be leveraged to discover additional accounts on other sites.

If you've just recently enabled 2FA, that could mean your password was compromised previously and you're just finding out about it now because you turned 2FA on. This is what 2FA is for, and if that's what happened it's doing its job to prevent access to your account even though your password has been compromised.

You should change your password and enable 2FA.

Clearly he already has 2FA enabled. That's what the text message is for, and that's what he said.

But yes, change your password to something unique to Rivian. And if you're using the same password elsewhere change those other passwords as well, and don't make them all the same.

 

[Donald Stanfield]

Change your password. Even if it is an internal glitch a password change isn't going to hurt anything. Anytime I get a sign in notification that I didn't make I assume it's a compromised password.

 

[tate16t]

Are you using the same username/password as on another site? If one got compromised, then those can be leveraged to discover additional accounts on other sites.


Clearly he already has 2FA enabled. That's what the text message is.

But yes, change your password to something unique to Rivian. And if you're using the same password elsewhere change those other passwords as well, and don't make them all the same.

He said he didn’t do anything to initiate it so I assume he has not enabled 2FA.

 

[Yossarian]

I have 2FA enabled and this didn't start happening until then. I'm trying to change my password right now, but the Rivian website isn't cooperating.

 

[tate16t]

This is indicative of what bad guys will do. They are likely aware of Rivian’s announcement about 2FA and this may be a phishing attempt to trick someone into following their instructions to gain access to your account. Or, RivIan screwed up.

 

[tate16t]

I have 2FA enabled and this didn't start happening until then. I'm trying to change my password right now, but the Rivian website isn't cooperating.

Ok good you enabled 2FA, bad that you cannot change your password.

 

[Yossarian]

I'm in a chat with Rivian right now and the rep seems to indicate that you can't change your password? You can only request Rivian to do it via an email from them with a unique link?

 

[tate16t]

I haven’t tried resetting my password yet but there’s clearly an option on their site. Click on “Trouble logging in” It will take you to the reset password screen. Follow the emailed instructions.

 

[Osyras]

I'm in a chat with Rivian right now and the rep seems to indicate that you can't change your password? You can only request Rivian to do it via an email from them with a unique link?

You cannot update your phone number for 2fa, but you can update your password....

Log in, go to Profile, Security and then Update:

 

[Yossarian]

As Alice said, "curioser and curioser!"

There seems to be some kind of glitch in both my phone and web app. What I see is different than what I should see - and that everyone else does. So no option to change password. I was actually able to do a change by doing a web search for resetting your Rivian password via email.

I just spent nearly 30 mins on the phone with Rivian; they are researching what the issue might be and will get back to me.

 

[Electrified Outdoors]

I might even try changing my email address too if that’s possible. Whoever or whatever is trying to access has your current login email. Change that and the texts will stop because that will no longer be valid.

after changing email, change password as well.

I have multiple services and 2FA and have not had this issue. Services should not trigger this because they get a token which stays valid unless you change your PW.

Sponsored