inCalifornian an Apple user under the name of Jay Brodsky has started a class action lawsuit against Apple because Two-factor authentication (2FA) “imposes extraneous logging in a procedure that requires a user to both remember password; and have access to a trusted device or trusted phone number.”
First, let’s understand what is Two-factor authentication. Let us say you would like to login to an App or a device. After hitting your password, a code is sent to another trusted device such as the telephone in your hand and once you enter the code, you can log in. It acts like the second level of security. This is called the 2FA.
Brodsky’s suit states that Apple doesn’t allow an individual to disable 2FA after two weeks have gone. Also, the filing notes that Apple doesn’t get user consent to let the attribute to remove the option to disable it manually. Brodsky says that consumers across the country were and continued to get harmed as a result. And by harm, he suggests that the time spent using 2FA to open device is costing companies money and customers their time.
Brodsky, and also the other members of the class, are seeking monetary damages and a ban against Apple to prevent the business from continuing its practice of allowing an individual to pick its own logging and safety procedure.
The filing asserts that Brodsky owns an Apple iPhone plus a set of Macbooks and that on or around Sept 2015, a software upgrade allowed 2FA because of his Apple ID with no consent. He goes on to say that each time he turns on one of his Appledevices, he’s made to use 2FA and must use it and also to open some 3rd party apps. The gist of Brodsky’s filing is that it can take him a few minutes to five minutes longer for every login with all the extra measures required with 2FA.
Plaintiff states that the e-mail doesn’t make it very clear that after two weeks, the link to disable 2FA expires although it’s explicitly written after the message.