Online Bank Security - BROKEN !?!?!

6_6_6

For those who tried to argue with me, those that said 3DES is fine thank you very much.

News flash.
https://sweet32.info/

6_6_6

[STRIKE][/STRIKE]

mgdavid wrote: »

coming to this thread a little late - another one for the Ignore List :j

Wrong thread? Either that or you just won the award for the most pointless comment.

6_6_6

[FONT=&quot]How convenient, MSE has cut the max message size to 2500 chars. So the main message cannot be edited.[FONT=&quot] [/FONT]
[/FONT]

bobblebob

Do any banks offer 2 step verification aswell as the current security login methods? I know 2 step verification isnt 100% secure (there are ways to steal SMS messages but its long winded), but its certainly more secure than not having it. Gmail, Outlook web, Playstation, Microsoft but to name a few have 2 step verification, yet banks dont seem to

mt99

No bank offers 2 step verification to LOGIN as far as I know. However...


Lloyds/TSB have 2 step verification to add a new payee (text message)


Nationwide ditto but they make you use the card/card reader instead of text message


Not 100% but better than nothing.

eskbanker

mt99 wrote: »

No bank offers 2 step verification to LOGIN as far as I know.

Investec does, albeit they're quite a niche player in the UK....

sausage_time

RBS have 2 step for adding new payee (using a card reader). They also send a text as soon as a new payee is added. Nice. I assume Nat West are similar. While the card reader is a bit of a pain, it strikes me as pretty secure. To work around it, I need to know the web login, have my physical card, and know the card PIN.

FD have 2 step for adding a new payee (using an app generated code, or - I believe - a dongle. I use the app).

SeaDweller

Barclays offer PINsentry: a card reader + PIN OR mobile app + PIN as options for login security. Payments to new people have to be verifed using PINsentry, even if login security only uses passwords/pins.