Every week or so,
when I log into an often used site
from my usual home computer,
it asks me to verify
my identity.
Why?
I’m using the same device
at the same location
on the same network.
And the asking site
should be tracking
all that information.
That they are asking
for further verification
doesn’t make me feel
more secure.
It makes me feel
less secure.
Because the site,
if functioning properly,
should know it is me.
If you ask your customers
for more information
to verify their identity
than is needed,
that will erode trust.
It won’t strengthen it.
Consider dialing it back.