Strong Customer Authentication - **Now delayed** changes to online verification

Flobberchops

eskbanker wrote: »

Barclays - PINsentry card reader or app equivalent (currently, unclear what future plans are)

There are four forms of 2FA being rolled out. App notification, one time passcode (SMS), digital pinsentry, and physical pinsentry.

masonic

Rich2808 wrote: »

Maybe HSBC and FD could provide free smartphones or tablets to all their banking customers - just so they can continue to bank with them?!..

I would fully support that idea, providing there was an equivalent cash reward for those who chose to use their own device. Sadly, I think we are taking a trip into the realms of fantasy.

As for M&S, I suspect their app will start requiring a code from the physical key at login, or they too will launch a digital version like FD and HSBC. I don't think credit card companies who also offer current accounts will escape these measures - perhaps credit card only companies will.

adindas

masonic wrote: »

Yes, FD appear to be phasing out the physical ones. I was pushed towards making the switch earlier this year (though I don't think it was mandatory at that time).

I am not quite sure about this phasing out. The information I have got from HSBC CS is that that they will still allow people who do not have digital secure key to use "physical secure key" at least for foreseeable future.

I just tried to login FD internet banking a few minutes ago and it still gave me the option to use my "physical secure key and access to my account.

I think you could only have either / or (not both) so if you already have access to digital secure key the physical one will be deactivated.

Until now, I have not got FD digital key and not plan to have one, unless I really have to, considering I only access my account once every few months.

I think this one explain why they still allow me to access online banking with Physical secure key.

masonic

adindas wrote: »

I am not quite sure about this phasing out. The information I have got from HSBC CS is that that they will still allow people who do not have digital secure key to use "physical secure key" at least for foreseeable future.

That decision by HSBC would have no bearing on what FD did. You'd be better off phoning FD to ask about their own policy. Here is an excerpt from an email I received from FD recently:

I just tried to login FD internet banking a few minutes ago and it still gave me the option to use my "physical secure key and access to my account.

I think you could only have either / or (not both) so if you already have access to digital secure key the physical one will be deactivated.

Until now, I have not got FD digital key and not plan to have one, unless I really have to, considering I only access my account once every few months.

I think this one explain why they still allow me to access online banking with Physical secure key.

That's correct, at the moment FD is allowing the physical secure keys to be used, but they are sending out emails encouraging people to switch if they have the app. Emails containing language such as:

"At the moment, you’re using a Physical Secure Key to log on and while you can continue using it, you may wish to consider switching to a Digital Secure Key if you have a compatible device. Without a Digital Secure Key, you won’t be able to verify payments within the App when we need your authorisation."

Ultimately I can see some banks withdrawing access to web browser based banking entirely, and giving customers the option of telephone or app (or branch for the lucky ones who have a nearby branch). Of course some banks are already app-only.

Fingerbobs

I log into FD (app and web) using only my password and memorable information - still possible as of about 5 minutes ago. I only use the physical security device when setting up a new payee, which I think I've done about twice ever. I've never set up the app-based digital secure key for FD - only ever had a physical one.

masonic

I switched to digital when I started getting warnings that the battery on my physical secure key was running out, and it transpired that getting a replacement was going to be a drawn out process.

In fairness, I'm glad I did, I can now log in with the mere touch of a finger, which is an improvement on memorable information or generating a code on the physical key.

Rich2808

masonic wrote: »

That decision by HSBC would have no bearing on what FD did. You'd be better off phoning FD to ask about their own policy. Here is an excerpt from an email I received from FD recently:


That's correct, at the moment FD is allowing the physical secure keys to be used, but they are sending out emails encouraging people to switch if they have the app. Emails containing language such as:

"At the moment, you’re using a Physical Secure Key to log on and while you can continue using it, you may wish to consider switching to a Digital Secure Key if you have a compatible device. Without a Digital Secure Key, you won’t be able to verify payments within the App when we need your authorisation."

Ultimately I can see some banks withdrawing access to web browser based banking entirely, and giving customers the option of telephone or app (or branch for the lucky ones who have a nearby branch). Of course some banks are already app-only.

#

I hope that is delayed - trying to set up payees and type details on an app isn't always easy unless you are digitally nimble.

Of course certain banks don't have any branches e.g. First Direct!

masonic

Rich2808 wrote: »

I hope that is delayed - trying to set up payees and type details on an app isn't always easy unless you are digitally nimble.

A Bluetooth keyboard could be quite handy in this respect (though I'm assuming such a device could be enabled within a banking app, which may not be the case - I haven't attempted it myself).

eskbanker

Flobberchops wrote: »

There are four forms of 2FA being rolled out. App notification, one time passcode (SMS), digital pinsentry, and physical pinsentry.

Do you have a link for that?

Interestingly, when trying to find anything Barclays publish about their approach to 2FA, I came across a thread on here from no less than twelve years ago in 2007, starting with a very familar style of indignant post....

binman wrote: »

Anyone else with Barclays account got any thoughts on this.

basically, from 26th Nov you wont be able to login unless you use the card reader with your bank card, meaning you'll have to cary the darn device with you if you use online banking from anywhere other than at home.

This is going to cost barclays my business

Uxb1

That's how indeed Barclays initially operated their pin sentry device at that time - 100% required at all times
They later relented and allowed certain low risk actions to be done if you logged on with your memorable info/password combo.
Setting up a new payee and accessing certain parts of your account details still required the pin sentry to be used.