It's up to your bank actually. Banks (generally) don't want to pay for your hardware key so you need to do a special dance to trigger their compliance bound neural pathways to send you one.
But then the true bliss will arrive the next year with eidas 3.0 or whatever it is called
In the Netherlands this boils down to the 'system banks' (the big ones like ING, ABN AMRO, Rabobank, etc.) which grudgingly offer hardware devices for people who won't or can't use a smartphone, and the neobanks (like Revolut, Knab, and Bunq) which make an Android or IOS smartphone a hard requirement.
ASN Bank has a website that allows you to set a browser-linked code once, after verifying both your email address and phone number. You can then use that browser+code as the 2FA device. It's pretty neat.
With Nordea, you get a code book full of one-time codes.
I have German bank accounts at two different banks and can send SEPA SCT instant transactions via webinterface and physical tan generator with both of them. Wero however is restricted to mobile apps regardless of what your tan generator is and in fact from what I heard, banks generally force you to switch to mobile app tan generators when opting into Wero.
The GLS bank implies it's not up to them. Generally I feel like implementation details are intentionally not made public. For example so far there is no definitive statement on the public internet I could find about whether iDEAL web based payments will still be available after iDEAL will actually switch to Wero. Statements like "For consumers, the online payment experience will remain largely unchanged, as they will continue to pay through their own bank." are always kept vague.
I'm not sure I understand the question actually. Will it work the same way for consumer as ideal does now? Yes, that the promise. Will the actual protocol and endpoints used be the same? I guess not, but also nothing drastic for integrators to worry about.
What I don't get is -- what will be added on top of what ideal already does.
>The GLS bank implies it's not up to them.
They probably can't make two systems within the bank talk to each other for whatever reason. One reason could be -- we are afraid to touch one side and the other is supplied by a vendor. Or politics, or just a plain skill issue. I'm not them and can't possibly know, but my employer was named in comments already, so I feel like I can extrapolate a bit