Starting December 13, 2024, Rivian is rolling out two-factor authentication (2FA) for all customer accounts. That means when you log into your Rivian account or app, you’ll need to verify your identity using two methods – your regular password and a one-time code sent to you. It’s a simple step to keep your personal info and vehicle access extra safe.
Why Two-Factor Authentication?
In a world where tech gets smarter and hackers get trickier, Rivian wants to stay ahead of the game. 2FA gives your account an added layer of security so you can worry less about anyone messing with your data or access to your Rivian.
What About Third-Party Tools Like ElectraFi?
If you’re using third-party tools like ElectraFi to monitor or interact with your Rivian, you might run into some hiccups. Currently, tools that don’t support 2FA may no longer work as expected once the feature becomes mandatory. This could mean you’ll need to log in separately to your Rivian account for certain features or wait for those tools to update and support 2FA. It’s worth keeping an eye on updates from any third-party services you use to see how they adapt to this change.
How to Set It Up
Getting started with 2FA is pretty straightforward. Just head to your Account page online or in the Rivian app under Profile > Security > Two-factor Authentication. You can choose whether you’d rather get your one-time password via email or text – whatever’s easier for you. (Heads up: Once it’s mandatory on December 13, you won’t be able to turn it off.)
Here’s How It Works
- On the Web: Your login session will last 1 hour by default, but if you’re on a trusted device, you can stretch that to 30 days.
- In the App: Rivian app sessions last up to 6 months. If your session runs out, no worries – you can still lock, unlock, and drive your Rivian with your phone until the next time you log in.
Why This Is a Good Thing
This new feature is all about peace of mind. Whether it’s keeping your details private or ensuring your vehicle access stays in the right hands, 2FA is an easy but effective way to boost security.
So, if you haven’t already, take a minute to set up two-factor authentication. It’s one less thing to stress about and come December 13, it’ll be required anyway.
It’s disappointing that Rivian implemented 2fa using OTPs over SMS as the second factor. This is well known as insecure and NIST began deprecating this method back in 2017.