HSBC security key

Ken_Oliver

ahai1 wrote: »

I have tried a number of times and it is very easy once you get the hang of it.

Wish I could say the same

I am all for extra security (I really am) and was ok with the fact the secure key was coming my way

It arrived as I was away on holiday I knew it had been sent as when I logged on from my holiday hotel it asked me to set it up

So when I got back I set to up ok,

Now the reality as set in, I find the keypad to small for my stubby fingers and often enter my digits wrong

I often used to check my account from different locations, but now I am reluctant to carry the key around with me (losses, breakages)

So I am restricted now to just using my internet banking from my home
PC, it takes me longer now as I have to be more carful in entering my details

So in one way it works as I log in less often now, but miss the convenience of just checking my account from any location I may be in when I feel the need to do it

Surfer

Phimo wrote: »

Well, I have received my Key Pad and can honestly say that it is awfull. The keys are hard to press and don't register properly. Perhaps it is my arthritis that HSBC haven't allowed for ?

As for the interface, it kept sending me off to non existant pages and it was only by luck that I found the page to continue setting up the security questions and answers.

If this is the future of HSBC Internet banking, I'll change banks if necessary even though I'm a Premier customer!

HSBC, you have made a big mistake in my opinion!!!!!

I too suffer with arthritis in my hands and have a lot of difficulty with the keypad as one has to press a button and hold it to switch it on. This is not easy.
You then need to be quick to enter the PIN number otherwise it switches off and you have to start all over again. With arthritis ther is not such word as "Quick" plus the fact that if you don't press hard enough the number is not entered and you then enter an incorrect PIN number.
We have a Nationwide account and using their keypad is a doddle as one does not have to press so hard. I am sure that we are not the only ones that are having difficulty with using the keypad due to a disability.

General_Mayhem

robolovsky wrote: »

The idea is good for people with just a single bank account to manage. In my case I manage three and one of them is my wife's who also requires access
...
Is there perhaps a way of obtaining two of these pads for one account? I suspect not! And what about the other obvious flaw in the system?
...

I'm in exactly the same situation - I rang HSBC, and after about 1 hour of being tossed back & forth between call-center automotrons, I was told this was not possible.

smartiedriver wrote: »

You shouldn't be accessing your wife's internet banking! If you have a joint account you can access the joint account from your own log-in.

Her own log-in should be known to her and her only, so you should have no need of her fob. If she ever had her account hacked, and had shared her log-in details with someone, then it is unlikely the bank will have any sympathy.

This is patently not true - anyone can give another trusted person authority to control their banking. For people who may need assistance or e.g. spending 6 months in Afghanistan this is well established.

alanq

General_Mayhem wrote: »

This is patently not true - anyone can give another trusted person authority to control their banking. For people who may need assistance or e.g. spending 6 months in Afghanistan this is well established.

Yes, but by registering a power of attorney not by getting someone to impersonate them.

smartiedriver_2

Alan Q is 100% right - logging in using the wife's ID and password is effectively impersonating her which the banks DO NOT allow.

Accessing via your own log in details, because you have formally been granted access (such as the case with serving military personnel, elderly relatives etc) is of course permitted but that isn't what the person making the post said he did.

magicjay71

As someone who is partial to the idea of truly mobile banking, these devices are a real PITA. I'm so wary of losing the damn things that I'd rather do all my banking at home. I don't think HSBC have really thought this one through. Surely they could have come up with a more elegant solution than this. Google have a smartphone app for two-factor authentication for an email account. I'd love to see HSBC come up with a similar solution.

jjlandlord

magicjay71 wrote: »

Google have a smartphone app for two-factor authentication for an email account. I'd love to see HSBC come up with a similar solution.

Yes, but this is much less secure than a hardware token.
We are talking about a major international bank here, if HSBC were to release such an app the one time pin code generation algorithm would be exposed and broken in a matter of days... Then back to square one.

ruffneck247

has now got a smashed screen as I have to cart it round with me. I use internet banking daily to keep a close eye on my accounts! Need to transfer some money tonight to stop myself going overdrawn, but telephone banking shuts at 10pm. Fantastic! Bet they won't refund the charges for using an unauthorised overdraft.

Really not thought out HSBC! Will consider moving to a different bank. They should have made this thing far more robust, especially when it has a keyring on it!

samwsmith1

Only the call centres close at 10, you can still use the automated system.

(Just a guess at the call centres closing as FD are 24/7)

Plxply

jjlandlord wrote: »

Yes, but this is much less secure than a hardware token.
We are talking about a major international bank here, if HSBC were to release such an app the one time pin code generation algorithm would be exposed and broken in a matter of days... Then back to square one.

It is fully possible for HSBC to release an application for phones and issue a different private key to each person, RSA and DSA are pretty bulletproof at this point and I would like to see someone crack a 2048 bit key let alone a 1024 bit one. Of course that would mean they would have to develop for Android, iOS, Blackberry, Java ME which would increase costs as well as the fact that by using Vasco they have something "proven" rather than having to develop their own.