Is the new SANTANDER Login secure ?

Jim431

SANTANDER have changed the login on desktop so that you only have to enter your User ID and a 5 digit password to get into your 1-2-3 Current Account.

They say it is secure but I am not convinced.

born_again

Well so long as you don't give out the used id & 5 digit code it is....

colsten

What are your concerns with the security, or perceived lack of it?

RG2015

colsten wrote: »

What are your concerns with the security, or perceived lack of it?

I share the concerns to some degree. Previously the login page had three elements; a personal image, an alpha-numeric password and a PIN. Now there is only one numeric only PIN.

I would further add that I can now access both the old and new login pages from different bookmarks.

It may not be less secure but it does feel a bit random and also lacking an explanation or any evidence of rigour.

molerat

Neither mine or MrsM's log ins have changed yet though she is still on the old 2 part log in for some reason, never got changed to the 3 part. The new screen is only the first step as they are going to 2FA in the near future.

Robin9

Jim431 wrote: »

SANTANDER have changed the login on desktop so that you only have to enter your User ID and a 5 digit password to get into your 1-2-3 Current Account.

They say it is secure but I am not convinced.

I don't think this is new - my account has the UserID / 5 digit since I opened it - 10+ years ago.

RG2015

Robin9 wrote: »

I don't think this is new - my account has the UserID / 5 digit since I opened it - 10+ years ago.

Are you saying that for over ten years you have only needed to enter your user ID and 5 digit PIN and nothing else to access your online accounts?

colsten

RG2015 wrote: »

I share the concerns to some degree. Previously the login page had three elements; a personal image, an alpha-numeric password and a PIN. Now there is only one numeric only PIN.

I would further add that I can now access both the old and new login pages from different bookmarks.

It may not be less secure but it does feel a bit random and also lacking an explanation or any evidence of rigour.

So, apart from lacking an explanation (never seen any company explain why their login is as it is), and no evidence of rigour (what evidence and what rigour are you after?), you think it might not be less secure, and you don't list any security issues. Let's see which ones the OP sees.

Robin9

RG2015 wrote: »

Are you saying that for over ten years you have only needed to enter your user ID and 5 digit PIN and nothing else to access your online accounts?

Yes - its also got a "recognize this" between the User ID and the 5 digit PIN

colsten

molerat wrote: »

The new screen is only the first step as they are going to 2FA in the near future.

There is of course the already existing 2FA for setting up new payees / making new payments. So the worst any fraudster could do if they knew your login credentials is send money to existing payees. That is, unless they also nicked your mobile, and know the unlock code for your mobile (which a security-conscious person would definitely have). No system in this world can protect people from being negligent with their own information .........

RG2015

Robin9 wrote: »

Yes - its also got a "recognize this" between the User ID and the 5 digit PIN

Thanks. This is a surprise to me as I get a recognise this image, a password to enter and a PIN to enter.

If you now go in to the main Santander home page at santander.co.uk and click the login icon you will be presented with the new login page. No image to recognise and no password (for me at least).