IBM Security Verify 17+

Got some chores to do before using but it works

Like IBM has replied to other reviews, you must sign up for an IBM ID for this to work. I am not an IBM enterprise user but I like IBM as a brand, applied -unsuccessfully- to various UX jobs in Austin and yet I signed up for an IBM account. It’s rather quick to accomplish but the UX isn’t as sharp as it could be and as a user, I had to poke around a few pages to get an IBM ID and to activate/register the this app. Plus, as a non-enterprise user, the pages and the user flow can look intimidating. Nevertheless, getting an IBM ID is free, as of Sept 23, 2024.
Once you get your app registered with an iBM ID, download it, IBM Verify behaves like any other authenticator app. Yet, as a student of IBM’s Carbon design system, I do have some gripes with it in my list of feedback:
-there are no styled (bolded) fonts for service names. Its a list of saved accounts, it works; it just looks uninspired and contributes scrutinizing the list for a specific account and to eye fatigue.
-No thin dividing line between accounts nor alternating row colors. Without this visual flair, the list seems endless and contributes to eye fatigue.
-I previously used Sophos’ InterceptX authenticator app and the home screen had codes and timers clearly visible- without the need to open a saved account. Not necessarily a gripe, but perhaps a requirement from enterprise users?
-Scrolling through a long list seems to fetch data, as if stored somewhere else outside of the phone. There is no loading animation, accounts sort of fade in the list, again, as if they were being fetched. If true, it is a bit concerning after saying it out loud.
-I am not too sure if I remember FaceID popping up upon first startup but if enterprise users need security, why doesn’t IBM Verify ask for authentication before showing a list of 2FA codes?
-Unlike InterceptX, all the device health metrics are stowed away in the settings icon. This is nice to see for a user of an unmanaged device.
-Also unlike InterceptX, there is no way to backup accounts. Maybe a good thing but who knows how long this app will be available? Allowing export might be good when sunsetting the app in the future.
-Missing visual flair like QR code frame overlay with the camera mode active.
-Accounts do not have icons. This is neither a negative or plus. I like the color choices and do not need graphic representation of the services- but I know this is a feature elsewhere.
-User guides and privacy policies are also stowed away but easily made available.
-Nice to see screen protection toggle in the settings menu.

Overall, I like the app. Partly, yes, because I like IBM but also because it works after you’ve done the hoop jumping on IBMs main website. It gets codes front and center and all the health metrics and user documents out of the way. Plus this isn’t published by companies like Goog or Microsoft.

Horrible App

If you delete this app after setting up two step authentication you will not be able to gain access to any of the online accounts that this app authenticated. After spending hours on the phone with helpdesk, they had no resolution other than waiting up to 3 to 4 weeks for the IT department to delete the account information from the website authenticated profile. The OHID BMV needs to remove this as an option for two step verification this app and process is worse than anything I’ve ever seen. I deleted this app. It’s horrible.

Ответ разработчика ,

Thanks for the feedback. If you created a MFA or 2FA account in the app, then proceeded to delete the app, all data i.e the accounts you created are deleted as well. This is typical behaviour when you remove an app from your device. Works as designed!

If you set up a new device then OTP (2FA account) are transferred to the new device, for security reason, MFA account are not.

Works Great for Our 400k Colleagues

At IBM we’re using our own software to power the work of hundreds of thousands of our employees around the world. IBM Security Verify is one of those solutions.