the only way you can login is through phone number, their should be another way to login too even if it takes time . what if the sim or phone get lost you cant even login into web dhan you have to block your sim and tell contact the dhan then they might block your trading account for time being or idk but i am sure its hectic.
so i think dhan should add login through mail+Pin or mail + otp+ pin
Hi @ritish_Kumar@DSingh Nope, that’s not the way one should think about financial accounts & assets. We may use the simplicity to login to other accounts on social media with Gmail auth, not financial assets.
Login & Authentication are core to protecting your account. We know one or two brokers support it, but in the recent years we know of instances where Google Auth was down and users were locked out of their trading / investing accounts. Additionally, we hear access being lost to gmail accounts or other reasons due to similar passwords and so, it means folks will have access also to your trading accounts and in such cases financial institutions like banks / for brokers can’t help you even if they want to. Additionally, these auth systems, in many cases we know of reside outside of India - while for regulated entities it is mandate to have critical systems in own control.
Convenience is one side of the story, when things go wrong - we won’t be able to support you even if you want us to. That aside, there are strict regulations and norms on access, authentication and security measures that we have to adhere to as financial institutions.
Tagging @ritish_Kumar and @DSingh here as well. I get where you’re coming from regarding ease of access, but as @PravinJ mentioned, financial security is a different ball game.
Having dealt with a personal email hack myself, I can tell you it’s a nightmare you don’t want near your trading account. Convenience is good, but keeping our capital behind a controlled and secure login is way more important. I’d take a slightly ‘hectic’ but safe process over a vulnerable one any day. Safety first!
The OP’s point is fair: the request is for an additional method, not a total replacement.
Regarding SEBI: Login with Google (static) + OTP (dynamic: only on mobile) meets 2FA compliance without needing a PIN. The “Google downtime” argument is weak.
Not in favour of “Login with Google” because it could be confusing for users with multiple logged-in google accounts.
User’s identity can be verified via email or UCC too, while keeping the existing OTP and PIN steps unchanged. In my opinion it’s a fair ask.
I am not taking about replacing current login system but add a additional one that requires Mail +OTP+ pin (that we have created for dhan) or you can add something from your end too. Is it that difficult to break in into an account which uses phone number+ otp+Pin? Is it more secure?