Internet Banking without Mobile Phone

Nicholas

scruffyone wrote: »

Thank you Nicholas, my information came directly from the CEO office at Halifax and I did question the stupidity of it.



SCGF - I still use a board and chalk - I didn't realise that we had moved on from that.

https://www.halifax.co.uk/aboutonline/changes-to-online-banking/

One thing you may be happy about with online banking is that once you have gone through the security faffing around, you have the option to designate your home PC as a 'trusted device'. That should stop most of the extra verification every time you logon. The only exception will be if you clear the browser cookies or the browser updates and clears the cookies.

eskbanker

scruffyone wrote: »

I want to be in control of how I operate my financial affairs not the EU or banks.

Go ahead then.

Just don't use banks in the EU (or in states leaving the EU who've already enshrined PSD2 into national legislation).

Simples....

Nicholas

I've tried to stay one step ahead of all this by downloading the banking apps to my phone. I was really against it all to start with, but with First Direct for example, the secure key is built into the app, so if I want to check my pay has gone in or a payment made first thing in the morning, I pick up my phone, open the app, thumb print and I'm in. So I'm now embracing it all and can see the convenience despite my previous 'principles'.

The only concern I have with all this for the future, is say I am happy with my old iPhone and then it gets to the point where the banks apps update to an iOS above which my phone can upgrade to I'm back to text codes again. Unless I upgrade my phone, of course, which I am happy to do when I want to rather than when I have to in order to keep the bank apps working.

colsten

Nicholas wrote: »

The only exception will be if you clear the browser cookies or the browser updates and clears the cookies.

A browser update shouldn't clear your cookies. For manual clearing, I use the free version of CCleaner which lets you exclude certain sites from the cleaning.

Nicholas

colsten wrote: »

A browser update shouldn't clear your cookies. For manual clearing, I use the free version of CCleaner which lets you exclude certain sites from the cleaning.

You're right. It shouldn't. But everytime chrome updates Tesco banking website needs me to authenticate with a text message. Perhaps it's not the cookies clearing. Perhaps it is something else happening that my desktop is not recognised as a trusted device when the chrome browser updates. It also happens when one of those twice a year massive windows 10 updates takes place.

londoninvestor

Nicholas wrote: »

You're right. It shouldn't. But everytime chrome updates Tesco banking website needs me to authenticate with a text message. Perhaps it's not the cookies clearing. Perhaps it is something else happening that my desktop is not recognised as a trusted device when the chrome browser updates. It also happens when one of those twice a year massive windows 10 updates takes place.

Sounds like Tesco is (at least partially) reliant on browser fingerprinting to identify your device as trusted. When you upgrade the browser or Windows, the fingerprint changes and you need to reauthenticate.

https://pixelprivacy.com/resources/browser-fingerprinting/

cloud_dog

Nicholas wrote: »

I was really against it all to start with, but with First Direct for example, the secure key is built into the app, so if I want to check my pay has gone in or a payment made first thing in the morning, I pick up my phone, open the app, thumb print and I'm in. So I'm now embracing it all and can see the convenience despite my previous 'principles'.

Oh dear. At least retain the requirement to enter a separate PIN to access your financial app.

colsten

cloud_dog wrote: »

Oh dear. At least retain the requirement to enter a separate PIN to access your financial app.

Once you enabled TouchID or FaceID for the app, you no longer log in with things like a PIN. The option is just not there then. Although you can, if you wish, revert to traditional login at any time. It goes without saying that the phone/tablet itself should have access protection

cloud_dog

Well that's ok then, as obviously fingerprint and face ID technology is known to be infallible... oh no wait...

As with everything in life it is up to individuals to make the choices and take responsibility for their actions. Lets just hope convenience doesn't override making the right choices.

I know I may come across as a bit of a luddite (a term someone used previously) but I am up to speed with the technology (I work in this environment producing both online and mobile apps for security conscious Government organisations), and it is not the technology I distrust.

Nicholas

cloud_dog wrote: »

Well that's ok then, as obviously fingerprint and face ID technology is known to be infallible... oh no wait...

As with everything in life it is up to individuals to make the choices and take responsibility for their actions. Lets just hope convenience doesn't override making the right choices.

I know I may come across as a bit of a luddite (a term someone used previously) but I am up to speed with the technology (I work in this environment producing both online and mobile apps for security conscious Government organisations), and it is not the technology I distrust.

But the fingerprint is only on your own personal phone. It's not like it can be hacked into anywhere else. If my phone was stolen, I just login on another device on my desktop and remotely wipe the phone.

It's more of a risk having your credit card stolen now that contactless has become the norm. Someone could have run up quite a few £30 transactions before you even notice your card has been stolen. I know you'd probably get the money back...eventually, but more hassle to sort out.