5
Internal messages reveal how Klarna scrambled to fix a glitch that exposed customer data
(www.businessinsider.com)
Klarna's product team discussed adding email OTP login, rather than only a text message OTP login via phone, internal Slack messages from August showed.
Can you please fucking stop using text and email as OTP. It is literally the worst, not to mention bad security practices. Use proper OTP via a dedicated app, or start using passkeys.
Staffers said at the time in Slack messages that adding the additional verification measure would have a negative impact on the conversion ratio for merchants — meaning the number of visitors to a retail outlet who complete a sales transaction — because email OTP would be more time-consuming for customers than text message OTP.
Once again Klarna, use a dedicated app or passkeys. Or maybe replace some people with AI, that seemed to work so well last time.