Sweden. The little keyfob thingies have been the thing for many decades here, I would guess ever since the dawn of internet banking, but I'd have to ask my parents instead of just assuming. I used to assume that was just normal for banks in the world at large. When you want to log in, the website gives you a code, you type the code into the fob and it responds with another code you type in to the website.

Nowadays they additionally offer login via BankID, a mobile app used throughout Sweden for personal online identification.

[–] Successful_Try543@feddit.org 8 points 1 month ago* (last edited 1 month ago) (1 children)

As a German, when living in Sweden, I was (and still am) very impressed, how widespread the use of (Mobile) Bank ID, beside the use of the personal ID number (As a male German, the state has assigned me at least three different ones without requiring any interaction.) for basically everything, is.

In Germany, before introducing a second electronic way of authentication for online (or phone) banking, it was done by a chosen password and a TAN (transaction number) from a list that you regularly got sent by mail in a special envelope. Later it was replaced by that "thingy", a mobile TAN generator, or push TAN via SMS.

[–] trolololol@lemmy.world 4 points 1 month ago (1 children)

OMG the special envelope seems to make it specially easier for people to steal just the right mail

[–] Successful_Try543@feddit.org 5 points 1 month ago

It was not special from the outside, but from the inside. It was either the envelope or the TAN list that was printed with a special pattern to prevent reading the list by using a flashlight.

[–] Wizard_Pope@lemmy.world 4 points 1 month ago

I want this so bad now.

[–] WalrusDragonOnABike@lemmy.today 3 points 1 month ago

OTP for 2FA has just started becoming common here (US) within the last decade I think. Each bank has its own separate app and many banks seem to limit password lengths to less than other websites.