@MiniForklift I was thinking more about making that first login safer on any given device or browser.
While asking additional authentication on every use of an app would surely be more secure (like with online banking), I don’t think this is really required for a service like Suunto.
However MFA absolutely should be the expectation for any service handling sensitive personal information.
Multifactor authentication does not necessarily mean you need to log in all the time. It just means that when you log in, you need to provide more than one “factor” of authentication. Like something you know (username & password), something you have (authenticator or hardware token) or something you are (biometric data).
This is basically the only thing that stops your sensitive information from leaking when you fall victim of phishing or credential leaks.
@adrian.s Some sort of U2F/Passwordless solution would absolutely be a modern way to go about this!
However even some sort of MFA is better than none. And since there might be technical and business related forces driving one solution over other I figured a general MFA might be an ask that just might fly as a feature request!
This is also something many Suunto competitors, like Garmin, Strava and Apple already support.