During the day that my phone was broken, I realized just how much modern security systems rely on a single device. I could not log on to American Express, Fidelity, Microsoft, or even my bank because every single one of them required a passkey or a text message for verification. Since my phone was dead, I had no way to receive those messages. There was no option to send a recovery link to my email, no backup method, just a dead end unless I wanted to sit on hold for an hour. I have since replaced my phone, which was another nightmare in itself (story coming), but until I regained access to my number, I was completely locked out of almost everything.

Passkeys, two factor authentication, and security measures that are supposed to help are just making everything more frustrating. I know they are important. I know they add an extra layer of security. But the whole system is broken.

Take American Express, for example. To verify my identity, I could either use the passkey on my phone, which was broken, or get a one time password sent by text, which I also could not receive because my phone was broken. There was no option to send me a recovery link by email. My only choice was to call in and sit on hold. Fidelity was just as bad. No text option, no email option, just a phone call where they would ask me for the same information I could have easily entered into a web browser. Is recording my voice really that important? What information could they possibly get from me over the phone that they could not get from me online? My Social Security number? My driver's license number? Any of those things could just as easily be entered into a secure form, but no, instead, I am stuck waiting for an agent just to tell them information I already have.

Even Microsoft refused to let me into my account without the authenticator app on my dead phone. I could not install the app on my backup phone because I could not authenticate. There was no fallback option, just a big locked door.

Then there is Open Bank, which will not let me log in at all without my trusted mobile device. No backup codes, no alternative methods, just sorry, you are locked out. I thought I would be smart and switch everything over to my Google Voice number so I could access my messages from any device, but no, most places refuse to accept VOIP numbers.

It is ridiculous. Security is important, but it should not be this broken. If people just used strong, unique passwords, none of this would be necessary. It is not like I have millions of dollars sitting in my bank account to protect. I just want to check my email, access my accounts, and move on with my life.

What about you? Are you as frustrated with modern security as I am, or do you think all these extra steps are worth it?