Compromised Password

Speaking of passwords, we were having some fraud attacks on our app, and so we needed to instill better password protection by making sure passwords were not being compromised. A compromised password is "an individual password that has previously been seen in a documented data breach where hackers released the stolen data publicly or sold it on the dark web." We use a third-party site that checks for compromised passwords.

‍

‍

3FA

Speaking of Fraud attacks, in late December (not 63) 2021, an imitation site was created, called diwy.com (a "w" to look like two "v's"), in order to get Divvy customers to click on it, enter in their divvy credentials, and then these credentials would be used on the real Divvy app to hack into customers' accounts. Divvy customers lost quite a lot of money, and so we needed to instill three-factor authentication instead of just the usual two-factor authentication. My team and I worked over the holidays during this attack to get this resolved asap!! There was lots of discussion and strategy on this with my PM and my team's amazing, motivated and dedicated engineers. We faced several challenges and problems, such as customers not following the instructions carefully, and thus I had to change flows and designs a few times. Eventually we killed this because we didn't have the desired backend to seamlessly create this experience. Our "workaround" was just not, well, working. But I am still proud of our accomplishments and how we really came together when our customers needed it the most.

‍

User Flow for Web V1

‍

Designs for Web

‍

User Flow for Mobile

‍

Designs for Mobile

‍

User Flow for Web - V2

‍

‍