Rivian forces two-factor authentication on all users, is your security at risk?

In the United States, Rivian, an electric vehicle startup, has implemented a significant update to its user account security protocol effective Friday, December 13, 2024. The company is now requiring all individuals with a Rivian account—whether they are vehicle owners, casual drivers, or passengers—to establish two-factor authentication (2FA) to enhance the safety of user data. Previously, 2FA was an optional feature but will now be a necessary step each time users log into the Rivian app or website once their current session expires. To comply with this new requirement, users will need to set up an additional layer of security, which includes entering a one-time code sent to their email or phone in addition to their username and password when logging in. Rivian has highlighted that this change is a proactive measure in response to the evolving security threats posed by advanced technology and threats from cybercriminals. The company emphasizes its commitment to protecting customer data, stating that as technology advances, so do the tactics of malicious actors. Therefore, Rivian is taking steps to ensure that its authentication process is robust enough to guard against potential breaches. Users who have not set up 2FA by the deadline will be automatically enrolled using the email address associated with their account, ensuring everyone’s data is protected without significant lapses in security. Rivian's electric vehicle lineup, which includes the R1T pickup truck and R1S SUV, boasts impressive specifications, such as a range of over 400 miles depending on the battery pack chosen. The market response to Rivian's vehicles has been positive, and the introduction of new security measures appears to be a critical step in building consumer trust in the brand as it strives to grow its customer base in the competitive electric vehicle market.