KPN mandatory SMS authentication - Revision history

Mr Pollo at 16:19, 6 March 2026

2026-03-06T16:19:45Z

← Older revision		Revision as of 16:19, 6 March 2026
Line 1:		Line 1:
			{{SloppyAI}}
	{{IncidentCargo		{{IncidentCargo
	\|Company=KPN		\|Company=KPN

RalfSchooneveld at 22:09, 24 February 2026

2026-02-24T22:09:49Z

← Older revision		Revision as of 22:09, 24 February 2026
Line 4:		Line 4:
	\|Status=Active		\|Status=Active
	\|ArticleType=Service		\|ArticleType=Service
	\|Type=~~Accesibility~~, Security		\|Type=Accessibility, Security
	\|Description=SMS two-step verification; no landline or alternative 2FA option available		\|Description=SMS two-step verification; no landline or alternative 2FA option available
	}}		}}
	~~{{Ph-I-Int}}~~
	==Background==		==Background==
	~~{{Ph-I-B}}~~		KPN’s MijnKPN service provides customer access to billing, subscription management, and account settings for broadband, television, and mobile services. In 2024, KPN introduced mandatory two-step verification (2FA) to improve account security. While 2FA is a common security measure, KPN’s implementation relies exclusively on SMS messages to mobile phones, with no officially supported landline, email, or hardware token alternatives. ([Security.nl](https://beveiliging.headliner.nl/item/kpn-verplicht-2-stapsverificatie-in-augustus-voor-alle-klanten-securitynl-68159))
	KPN’s MijnKPN service provides customer access to billing, subscription management, and account settings for broadband, television, and mobile services. In 2024, KPN introduced mandatory two-step verification (2FA) to improve account security. While 2FA is a common security measure, KPN’s implementation relies exclusively on SMS messages to mobile phones, with no officially supported landline, email, or hardware token alternatives. (Security.nl
	)

	==[Incident]==		==Incident==
	~~{{Ph~~-I-~~I}}~~		In early 2024, KPN began enforcing mandatory SMS-based 2FA for all customers. Users must enter a one-time code sent to their registered mobile number to access their accounts. Customers without mobile phones, non-Dutch mobile numbers, or with device issues cannot complete the authentication process, effectively restricting access.

	~~===[Company]'s response===~~		Community reports confirm that KPN support advises users in such cases to obtain a local mobile device or contact support to regain access. The policy has been systemically applied across the customer base, demonstrating it is a corporate-wide requirement rather than isolated incidents. ([KPN Community](https://community.kpn.com/kpn-id-en-mijnkpn-29/hoe-gebruik-ik-tweestapsverificatie-zonder-nederlands-telefoonnummer-639075))
	~~{{Ph-I-ComR}}~~
	~~In early 2024,~~ KPN ~~began enforcing mandatory SMS-based 2FA for all customers. Users must enter~~ a ~~one-time code sent to their registered~~ mobile ~~number~~ to access ~~their accounts~~. ~~Customers without mobile phones~~, ~~non~~-~~Dutch mobile numbers, or with device issues cannot complete the authentication process, effectively restricting access~~.

	~~Community reports confirm~~ that ~~KPN support advises users in such cases to obtain a local mobile device or contact support to regain access~~. ~~The policy~~ has been ~~systemically applied across~~ the ~~customer base~~, ~~demonstrating it is a corporate~~-~~wide requirement rather than isolated incidents~~. (~~KPN Community~~		==Company's response==
			KPN has stated that SMS is the most widely accessible method for two-step verification and that other authentication channels are being evaluated. No public timeline has been provided for the rollout of alternatives such as landline OTP, app-based authenticators, or hardware tokens. ([Security.nl](https://beveiliging.headliner.nl/item/kpn-verplicht-2-stapsverificatie-in-augustus-voor-alle-klanten-securitynl-68159))

	~~KPN’s response~~		==Consumer response==
			Community discussions and public forums indicate frustration among users who cannot use SMS, citing restricted access, lack of alternatives, and reduced consumer autonomy. Verified responses from KPN moderators confirm the requirement and advise users to acquire a mobile device to comply. The systemic nature of this policy has prompted consumer advocates to call for multiple authentication channels to enhance accessibility and security. ([KPN Community](https://community.kpn.com/online-veiligheid-25/mijnkpn-tweestapsverificatie-mfa-wordt-verplicht-wat-betekent-dit-voor-jou-637989))
	KPN has stated that SMS is the most widely accessible method for two-step verification and that other authentication channels are being evaluated. No public timeline has been provided for the rollout of alternatives such as landline OTP, app-based authenticators, or hardware tokens. (Security.nl
	)
	Consumer response

	Community discussions and public forums indicate frustration among users who cannot use SMS, citing restricted access, lack of alternatives, and reduced consumer autonomy. Verified responses from KPN moderators confirm the requirement and advise users to acquire a mobile device to comply. The systemic nature of this policy has prompted consumer advocates to call for multiple authentication channels to enhance accessibility and security. (KPN Community
	)

	==Lawsuit==		==Lawsuit==
	~~{{Ph-I-L}}~~		No publicly documented litigation regarding this policy has been reported as of 2026.


	~~==Consumer response==~~
	~~{{Ph-I-ConR}}~~


	==References==		==References==
	{{reflist}}		{{reflist}}

	~~{{Ph-I-C}}~~		[[Category:KPN N.V.]]
			[[Category:Consumer security issues]]
			[[Category:Accessibility issues]]

RalfSchooneveld: /* [Company]'s response */

2026-02-24T22:08:00Z

[Company]'s response

← Older revision		Revision as of 22:08, 24 February 2026
Line 25:		Line 25:

	KPN has stated that SMS is the most widely accessible method for two-step verification and that other authentication channels are being evaluated. No public timeline has been provided for the rollout of alternatives such as landline OTP, app-based authenticators, or hardware tokens. (Security.nl		KPN has stated that SMS is the most widely accessible method for two-step verification and that other authentication channels are being evaluated. No public timeline has been provided for the rollout of alternatives such as landline OTP, app-based authenticators, or hardware tokens. (Security.nl
			)
			Consumer response

			Community discussions and public forums indicate frustration among users who cannot use SMS, citing restricted access, lack of alternatives, and reduced consumer autonomy. Verified responses from KPN moderators confirm the requirement and advise users to acquire a mobile device to comply. The systemic nature of this policy has prompted consumer advocates to call for multiple authentication channels to enhance accessibility and security. (KPN Community
	)		)

RalfSchooneveld: /* [Company]'s response */

2026-02-24T22:07:29Z

[Company]'s response

← Older revision		Revision as of 22:07, 24 February 2026
Line 21:		Line 21:

	Community reports confirm that KPN support advises users in such cases to obtain a local mobile device or contact support to regain access. The policy has been systemically applied across the customer base, demonstrating it is a corporate-wide requirement rather than isolated incidents. (KPN Community		Community reports confirm that KPN support advises users in such cases to obtain a local mobile device or contact support to regain access. The policy has been systemically applied across the customer base, demonstrating it is a corporate-wide requirement rather than isolated incidents. (KPN Community

			KPN’s response

			KPN has stated that SMS is the most widely accessible method for two-step verification and that other authentication channels are being evaluated. No public timeline has been provided for the rollout of alternatives such as landline OTP, app-based authenticators, or hardware tokens. (Security.nl
			)

	==Lawsuit==		==Lawsuit==

RalfSchooneveld: /* [Incident] */

2026-02-24T22:05:44Z

[Incident]

← Older revision		Revision as of 22:05, 24 February 2026
Line 18:		Line 18:
	===[Company]'s response===		===[Company]'s response===
	{{Ph-I-ComR}}		{{Ph-I-ComR}}
			In early 2024, KPN began enforcing mandatory SMS-based 2FA for all customers. Users must enter a one-time code sent to their registered mobile number to access their accounts. Customers without mobile phones, non-Dutch mobile numbers, or with device issues cannot complete the authentication process, effectively restricting access.

			Community reports confirm that KPN support advises users in such cases to obtain a local mobile device or contact support to regain access. The policy has been systemically applied across the customer base, demonstrating it is a corporate-wide requirement rather than isolated incidents. (KPN Community

	==Lawsuit==		==Lawsuit==

RalfSchooneveld: /* Background */

2026-02-24T22:05:13Z

Background

← Older revision		Revision as of 22:05, 24 February 2026
Line 10:		Line 10:
	==Background==		==Background==
	{{Ph-I-B}}		{{Ph-I-B}}
			KPN’s MijnKPN service provides customer access to billing, subscription management, and account settings for broadband, television, and mobile services. In 2024, KPN introduced mandatory two-step verification (2FA) to improve account security. While 2FA is a common security measure, KPN’s implementation relies exclusively on SMS messages to mobile phones, with no officially supported landline, email, or hardware token alternatives. (Security.nl
			)

	==[Incident]==		==[Incident]==

RalfSchooneveld: The KPN mandatory SMS authentication policy requires all customers to use mobile-based two-step verification (2FA) for account access. No landline or alternative verification methods are officially supported, which limits accessibility for users without mobile devices and raises concerns about consumer choice and security resilience. The rollout began systemically in 2024 and affects all MijnKPN accounts.

2026-02-24T22:03:30Z

The KPN mandatory SMS authentication policy requires all customers to use mobile-based two-step verification (2FA) for account access. No landline or alternative verification methods are officially supported, which limits accessibility for users without mobile devices and raises concerns about consumer choice and security resilience. The rollout began systemically in 2024 and affects all MijnKPN accounts.

New page

{{IncidentCargo
|Company=KPN
|StartDate=2024-01
|Status=Active
|ArticleType=Service
|Type=Accesibility, Security
|Description=SMS two-step verification; no landline or alternative 2FA option available
}}
{{Ph-I-Int}}
==Background==
{{Ph-I-B}}

==[Incident]==
{{Ph-I-I}}

===[Company]'s response===
{{Ph-I-ComR}}

==Lawsuit==
{{Ph-I-L}}

==Consumer response==
{{Ph-I-ConR}}

==References==
{{reflist}}

{{Ph-I-C}}