Quote Originally Posted by Yankeeman07 View Post
Merchants should establish 2FA - When and if a bank log-in is requested - the merchant knows what is occurring.
2FA is actually a great idea, but he would still need to change his password again after the login so that the next time that browser/computer/etc wouldn't be able to log in again.