Ocado now wants a One Time passcode for me to shop

[TemuSussex]

This is annoying, now if I want to login to Ocado, even on trusted devices, I have to check my email for a one time passcode and enter it before I can shop.

I will be letting them know what I think but is anyone else irritated by this?

Seems sensible to me

I disagree. You should be able to set something as a trusted device.

And how is it secure to send the OTP to the same device that you are using the app on?

Oh that’s a good point. Maybe they should just do it if trying to change address? Or can you see your bank card once you log in?

I couldn't be doing with this level of annoying hassle.

Other shopping sites manage just fine, so what is it that's so irretrievably shit about their system security for this to be deemed necessary?

Shop somewhere else instead.

This happened to me - I had no idea Ocado zoom existed, someone spent about £175 across 2 orders. I was on to Ocado in a few minutes but they said nothing they could do. The code would have prevented that. This happened in March and I only reactivated my account yesterday, having finally got fed up of missing items, substitutions and unavailable products at other supermarkets.

It will be a pain when DH wants to log in and amend an order I've made, but that's the only downside I can see.

It would have prevented someone logging into Ocado Zoom as you, absolutely - a security flaw they should have thought about before they launched the new service. What they're doing now is not only locking the door after the horse has bolted, it's locking the window in case the horse gets out that way ... okay that's a terrible analogy, but it's a pointless measure that is mitigating NOTHING. And the horse is all hot and irritated cos it's not getting a nice through draft from the window.

For me, it's a huge downside exacerbated by the fact it's pointless. The Ocado account is 'mine', so I get the codes. I'm not infrequently unable to to access my email because of my working pattern, so that means DH and DD can't shop when I'm not available. DD is also known to add stuff at 2am, so whether I'm theoretically available or not I'm not checking my email for a code then.

Yes, it's a first world problem, but this is a first world service. Online grocery shopping is meant to be easy and straightforward; anything a company does to make it less so is going to lose them business.

To add insult to injury - the 2SV on Ocado Zoom itself? Doesn't work. I've tried twice to log in, twice it's told me it's sending a code to my email address - nothing.

Why do you think this?

I think they should make more of an effort to keep customers safe themselves than always pushing more hoops to jump through back onto them.

At some point, people will stop using them.

I had this problem for a few days and then it stopped. It was only on the website, the app continued working as normal.

It is supremely annoying for this very specific kind of shopping where you may go into your order and amend it multiple times.

I’d rather have a 60 second inconvenience than have my card details filched

I think it works okay on ApplePay

DH and I have a shared email account for our Ocado account. Means that with the passwords shared in our passwords app, we both have the same level of access, and mean neither of us is the gatekeeper of codes. I also find that the app isn’t affected and I do most of the admin on there anyway.

It's really annoying if two of you do the shopping on one account.

Agree! Petty? Minor? Nowhere near as important as the serious issues we're all dealing with?
Of course, but it's one more piece of rubbish. Tesco don't do this. We're adults and it's up to us to keep our passwords safe so no one logs on and changes our brand of toilet paper in our order, so if Ocado don't change this, the other supermarkets will welcome our money!

This does nothing to stop you having your credit card details stolen. You could give me your Ocado logon and then send me the emailed code and I wouldn’t be able to see your credit details.

What it’s doing is potentially lulling you into a false sense of security because god knows what Ocado are doing behind the scenes if this is their idea of good security.

@HoppityBun

It is not a 60 second inconvenience - people wouldn't be complaining if that's all it was

It doesn’t lull me into anything because I’m no more and no less careful than I was before. Whatever it does, it’s just a new 2 factor security measure and now I know to expect it, it really doesn’t take up extra time. They’ve had recent data breaches and if this helps, then fine.

Well I get the email within seconds and then I’m in, so 60 seconds is over generous.

One time password is fine but can we have a choice of how to receive it?
My water company now requests this via email, so you have to log in, go to email, wait a few minutes while it arrives as it's never instant and back to the website, sometimes I forget while waiting and end up not even getting into my account.
It all takes way longer now and if anyone wants to hack my water account and pay my bills be my guest!!

As long as you able to stay logged in