Barclays Online - PINsentry

binman

Anyone else with Barclays account got any thoughts on this.

basically, from 26th Nov you wont be able to login unless you use the card reader with your bank card, meaning you'll have to cary the darn device with you if you use online banking from anywhere other than at home.

This is going to cost barclays my business

nickmack

binman wrote: »

basically, from 26th Nov you wont be able to login unless you use the card reader with your bank card, meaning you'll have to cary the darn device with you if you use online banking from anywhere other than at home.

One of my colleagues has been issued with one of these. Seem like a bit of a pain. I get the feeling the reason is for increased protection is for the bank not the customer in cases of unauthorised access. People who simply want to check their account online, now have to carry this device around with them.

hjb123

My mum got one of these with her natwest account, what I dont get is that the thing didnt connect to the phone line or computer at all - so how does it work? I dont get it!?

Rafter

One of the biggest online frauds at the moment is phishing or identity fraud.

In the same way as a card with a chip in it prevents unauthorised use or copying without the card and pin present, this gadget is designed to prevent someone from hacking into your account or guessing your details, without having the PINSentry device.

It will save your bank money if they have less fraud costs, which should also mean better rates for customers of those banks who have lower fraud costs as a result.

Personally I'd rather they built this kind of thing into a mobile phone or even the debit card itself though - IE something that you would naturally carry with you most of the time.

R.

nickmack

hjb123 wrote: »

My mum got one of these with her natwest account, what I dont get is that the thing didnt connect to the phone line or computer at all - so how does it work? I dont get it!?

After you enter your PIN correctly, the device returns a one time use 8 digit code that is then checked against the Barclays server.

This is more secure than just having a password, because it is always changing. It's not foolproof however and can be vunerable to an attack called 'Man in the middle' where a fake website is setup and the code is passed in realtime to the real site and used to log into your account.

nickmack

Rafter wrote: »

Personally I'd rather they built this kind of thing into a mobile phone or even the debit card itself though - IE something that you would naturally carry with you most of the time.

One Time Authentication is already possible with Mobile phones. The code can be generated on the phone using software or sent by SMS. Not sure whether it's use will become common yet though.

cs27

A quick question for those of you who have already received one of these from Barclays - how were they delivered (e.g. recorded delivery or just standard first class post) and how long was it between the initial letter explaining that you are being issued with a PINsentry and you actually receiving the card reader?

I was told in my letter twelve days - this has now passed and I still haven't received anything. I'm assuming the postal strikes could have delayed it! The only thing that concerns me is that online it now states that at the end of the month I will not be able to log in without my reader!

Any advice/info much appreciated!

Thanks.

James

From a criminals perspective the good thing about PINs is they can use them to hit Cash Points with Cloned or Stolen Cards. Or use them in Chip & PIN complaint retailers with genuine cards without every being challenged.

The downside for the cardholder is there appears to be a liability shift. I wonder if PIN sentry will shift have the same effect for goods going astray - the victim bears the cost of any fraud.

Recent examples:

Flaw At The Heart of Chip & PIN.

Card Fraud Puts Sister in Debt.

How Thieves Bypass Bank Card PINs (IMHO PINs should read Chips).

Queen_B_3

I use online banking with Barclays and I am not aware of this.

dmg24

binman wrote: »

Anyone else with Barclays account got any thoughts on this.

basically, from 26th Nov you wont be able to login unless you use the card reader with your bank card, meaning you'll have to cary the darn device with you if you use online banking from anywhere other than at home.

This is going to cost barclays my business

You will find that all banks are going with this method of fraud protection in the near future ... so it looks like you'll be keeping your money under the mattress!

Queen_B, the system is being phased in, not all customers have been made aware yet x

oxmatt

I believe that you don't need this to do most online functions (e.g. checking statements, making payments to existing payees etc) and that it will only be needed for certain higher risk transactions e.g. setting up new payees and making one off transfers.

Therefore with a bit of preplanning (i.e. setting up your payee lists) this should not cause too much disruption and should make your banking more secure.