Post #4368837
2026-08-03 17:11 UTC
@JessTheUnstill@infosec.exchange I have set up my PayPal *savings* to pull money through my credit union debit card periodically — primarily as an automatic savings measure, not loss firewalling — which effectively makes money inaccessible from the CU account. Making it spendable at all would require a manual PayPal transfer.
This would be weakened if both accounts could be accessed with the content of a password vault alone. My CU uses a live face shot and PayPal uses either a device-bound passkey or TOTP.
Replies (1)
-
@grumpybozo@toad.social 2026-08-03 17:14
@JessTheUnstill@infosec.exchange Generically: 2 accounts, one of which can debit the other but cannot be directly spent from & which the source account cannot touch. BOTH have multi-factor authentication with a second factor NOT stored with username & password.