Tesla is finally fixing this major security flaw

(Image credit: bgr)

Tesla is finally adding a much-needed security feature to its mobile app in a bid to try and protect its vehicles.

The carmaker is introducing two-factor authentication (2FA) into its mobile app, meaning users will need to combine login information with a code or identifier linked to their personal device in order to gain access, hopefully boosting security protection for owners.

The move was "embarrassingly late", admitted Tesla CEO Elon Musk.

Tesla security

“Sorry, this is embarrassingly late. Two factor authentication via sms or authenticator app is going through final validation right now,” Musk wrote in a Twitter response to a question from one of his followers.

2FA has become standard practice for almost all of the world's top technology firms, with Musk previously saying the platform would be "coming soon" when asked back in April.

Musk first mentioned adding 2FA to the Tesla app in May 2019.

The app allows Tesla owners to access a number of features and systems on their vehicle without being inside, including checking its battery charge level, adjusting the interior temperature, and even locking and unlocking the car remotely.

It's not known what form Tesla's 2FA will take, whether it will send out a code to a user's phone that can be entered to gain access, or use an SMS message to send a password or other information entered using a separate app.

While 2FA utilization has increased dramatically over the past few years, it’s still far from universal. Google and Microsoft both have their own Authenticator apps, which can be used to approve access. However earlier this year both services were found to have an identical security vulnerability which could have allowed hackers access to user information.

The idea behind two-factor authentication is that it’s far more difficult to compromise both factors than either one individually. For example, your debit card acts as a single factor when withdrawing from an ATM. Asking for a separate PIN number substantially reduces the risk of fraudulent withdrawals—even if someone steals your card, they will still need to identify your PIN in order to get any cash.

Via TechCrunch

Mike Moore
Deputy Editor, TechRadar Pro

Mike Moore is Deputy Editor at TechRadar Pro. He has worked as a B2B and B2C tech journalist for nearly a decade, including at one of the UK's leading national newspapers and fellow Future title ITProPortal, and when he's not keeping track of all the latest enterprise and workplace trends, can most likely be found watching, following or taking part in some kind of sport.

Latest in Security
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Veeam urges users to patch security issues which could allow backup hacks
UK Prime Minister Sir Kier Starmer
The UK releases timeline for migration to post-quantum cryptography
Representational image depecting cybersecurity protection
Cisco smart licensing system sees critical security flaws exploited
Image depicting a hand on a scanner
Hackers are targeting unpatched ServiceNow instances that exploit 3 separate year-old vulnerabilities
Latest in News
L-mount alliance
Sirui joins L-Mount Alliance to deliver its superb budget lenses for Leica, DJI, Sigma and Panasonic cameras
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
Samuel and Romy standing very close together in A24's Babygirl movie
Everything new on Max in April 2025, including A24's Babygirl and The Last of Us season 2
An AMD Radeon RX 9070 XT made by Sapphire on a table with its retail packaging
AMD’s secret weapon against Nvidia seems to be stock – way more RX 9070 GPUs are rumored to be hitting shelves than RTX 5000 models
Seth Milchick and Kier Eagan's animatronic speaking in Severance season 2 episode 10
Apple TV+ announces Severance has been renewed for season 3 after that devastating finale
AMD Ryzen AI
New leak suggests AMD's working on an Arm-based processor to rival Qualcomm's Snapdragon X series