Stupid Barclays PINsentry Thingymajic - Can I Log Into My Online Account Without It?

Marv02

Just wondering if its possible to log into my online Barclay's account without the need of that dreadful invention... The calculator. (Sorry, I meant, the future of security.)

I remember last week I had to log into my account, I had everything, my membership number, and my card handy, my secret question the lot and it promoted me on the last stage that I needed that terrible thing of an invention... The PINsentry. I went on a house hunt trying to locate the damn calculator. (oops, did I say that again?)

Just this afternoon when at work, I had some money coming into my account, and had to quickly check to see if it was there... I went through the process and BAM... "Please use the chunky inconvenient, calculator that we sent to you via post in order to view your statement." I mean, honestly... The thing is the size of my phone. I was so raged out I started punching in the monitor. Luckily it was CRT and didn't break.

So, the question is, is there anyway to get view your online statement the old school way? With your membership, card, and your security answer?

Thanks.

CLAPTON

yes there is

pmduk

Not exactly, you can set up what they call basic access, but you will have to use the pin sentry to do this (the first time only). My pin sentry just lives by the pc. All the various banks' similar security devices are interchangeable.

questionabout

I agree Pin-sentry is annoying and completely Over The Top Security from Barclays. :mad:

Once you have already used your Pinsentry device, you cannot go back to the normal login. You can get basic access but not unless you first login with the device, then enable "basic access" on your account options which will then give you limited basic access in the future should you forget or lose your gadget.

To do a simple transfer to someone now takes about 5 minutes with about 10 different steps and having to repeat enter things in to the device like payee's account number, amount etc while still doing all this on screen and verifying everything with 8 digit codes.

In my opinion Barclays have gone too far with this security feature to make online banking a real chore.

If anyone reading this hasn't yet requested or been sent a Barclays Pinsentry then Don't Get One because you'll be sorry you did.

iblametheparents

questionabout wrote: »

I agree Pin-sentry is annoying and completely Over The Top Security from Barclays. :mad:

Once you have already used your Pinsentry device, you cannot go back to the normal login. You can get basic access but not unless you first login with the device, then enable "basic access" on your account options which will then give you limited basic access in the future should you forget or lose your gadget.

To do a simple transfer to someone now takes about 5 minutes with about 10 different steps and having to repeat enter things in to the device like payee's account number, amount etc while still doing all this on screen and verifying everything with 8 digit codes.

In my opinion Barclays have gone too far with this security feature to make online banking a real chore.

If anyone reading this hasn't yet requested or been sent a Barclays Pinsentry then Don't Get One because you'll be sorry you did.

Incorrect, if you wish to change back to the traditional membership then you can.

You only have to use PINsentry the first time you make a transfer to a new benificiary.

Would you rather have fraud on your account?

CLAPTON

Marv02 wrote: »

Just wondering if its possible to log into my online Barclay's account without the need of that dreadful invention... The calculator. (Sorry, I meant, the future of security.)

I remember last week I had to log into my account, I had everything, my membership number, and my card handy, my secret question the lot and it promoted me on the last stage that I needed that terrible thing of an invention... The PINsentry. I went on a house hunt trying to locate the damn calculator. (oops, did I say that again?)

Just this afternoon when at work, I had some money coming into my account, and had to quickly check to see if it was there... I went through the process and BAM... "Please use the chunky inconvenient, calculator that we sent to you via post in order to view your statement." I mean, honestly... The thing is the size of my phone. I was so raged out I started punching in the monitor. Luckily it was CRT and didn't break.

So, the question is, is there anyway to get view your online statement the old school way? With your membership, card, and your security answer?

Thanks.

It seem likely that Barclay's isn't your main bank account or you normally use branches / cheques/ paper

so why not use your other a/c and ditch this one?

Olipro

questionabout wrote: »

I agree Pin-sentry is annoying and completely Over The Top Security from Barclays.

Then clearly you have absolutely no clue as to how stupid people really are. Without two-factor authentication, it makes preventing fraud quite an onerous task.

questionabout

Olipro wrote: »

Then clearly you have absolutely no clue as to how stupid people really are. Without two-factor authentication, it makes preventing fraud quite an onerous task.

...But "Two-factor authentication" sounds like its just a 2 step process, if only it was that simple. :rotfl:

Here is my recent experience of transfering money to my sisters account:

Step1 ) Visit Barclays website > Logon

Step 2) Enter my Surname

Step 3) Enter my long 12 Digit Membership Number (that I did not pick)

Step 3) Enter last 4 Digits of my debit card

Step 4) Find pinsentry device and insert card and press Identify button

Step 5) Enter my Pin and Enter

Step 6) Read another 8 Digit Security Code of Pinsentry screen and enter in website

---

Finally Logged On

---

Now at this point, I should be able to put my Pinsentry device away but no :think:

Step 7) Select Pay Bill/Someone

Step 8) Enter Name, Sort Code and Account number

Step 9) Enter Reference, Amount, Time of Transfer

Step 10) Repeat Similar Process with card as above

Step 11) Input 3rd Parties (sister) account number on to PinSentry Device

Step 12) Use Device keypad to re-confirm amount of Transfer

Step 13) Enter another security number on screen :wall:

---

I Really don't understand why the need to use PinSentry to make a new payment!!!!! Even if I was a Fraudster at this point I have already logged in with Pinsentry which means I already have the device, debit card and PIN so whats the point in getting me to re-enter everything again? It doesn't make a transfer or payment any more secure. :mad:

I like the idea of Pinsentry. Security is important, and bearing in mind I can walk in to any LloydsTSB branch with my savings card (non-chip-pin), withdraw £500 over the counter and simply sign a receipt slip with no pin or ID needed!! So yes I can understand to a point and appreciate Barclays trying to make things more secure these days however....

There is a line between additional security and hampering usability and for me (and compared to other financial account logins), Barclays have gone way to far so I'm gonna ring them this week to ask if I can switch back to Standard Access.

chexum

questionabout wrote: »

It doesn't make a transfer or payment any more secure.

That's exactly what it does. In a way, it's more important to have transfers protected than logins. Without it, you could fall victim of a man-in-the-middle attack, which could be as real as a trojan software on your computer.

If it's there and you logged in, it could make any transfers without you having a chance realising it. The software (like a proxy between your screen and the bank), could show everything is in order, while it's busy transferring out your money.

There's a good reason for additional off-line authentication for new payments in the current climate on the internet... I personally don't find it easy to lay blame on the banks if they don't want to take the risk from customers wanting just "easy" access. Security is hard.

questionabout

chexum wrote: »

That's exactly what it does. In a way, it's more important to have transfers protected than logins. Without it, you could fall victim of a man-in-the-middle attack, which could be as real as a trojan software on your computer.

If it's there and you logged in, it could make any transfers without you having a chance realising it. The software (like a proxy between your screen and the bank), could show everything is in order, while it's busy transferring out your money.

There's a good reason for additional off-line authentication for new payments in the current climate on the internet... I personally don't find it easy to lay blame on the banks if they don't want to take the risk from customers wanting just "easy" access. Security is hard.

But Barclays already provide Free Anti-virus (Kaspersky) to online customers for that reason.

Why should the rest of us have a to jump through loop after loop after loop just because a minority of customers are lapse with their security. Barclays customers can nowdays simply swipe their contactless card for purchases up to Fifteen quid per time, yet online banking takes a week to do anything with this gizmo. Its like were going backwards with Barclays, yet I can still login to my credit card account with a simple username and password...Why? Its call HTTPS & Putting Trust in the Customer.

I'll say again - I like the Idea of Pinsentry. But its not quick enough/user friendly enough for my banking needs. I worry soon someday if Barclays Security get their wish we'll all be walking round cash points with this little gadgets in our pockets :rotfl:

Olipro

questionabout wrote: »

Even if I was a Fraudster at this point I have already logged in with Pinsentry which means I already have the device, debit card and PIN so whats the point in getting me to re-enter everything again? It doesn't make a transfer or payment any more secure.

Wrong, it means the fraudster has compromised your computer and has served you a fake page which gets the login code from you.

However, in order to get your cash he needs to serve you another fake page asking you to perform the respond/sign function of your CardReader, doing this would most likely make you suspicious especially as the number you enter is either completely or partially comprised of the payee's account number and most people know this.