The New Top Easy Access Savings Discussion Area

friolento

Have you tried deleting cookies and browsing history?

I use the app in preference to browser access myself.

dosh37

https://forums.moneysavingexpert.com/discussion/comment/82122796#Comment_82122796

There appears to be a serious security issue with the Tesco Banking website…

I just tried closing all my browser windows.

I then started Firefox, changed the Privacy and Security settings Enhanced Tracking Protection from 'Custom' to the default 'Standard'. I then closed and re-opened Firefox. When I navigated to the Tesco Bank website, I found I was already logged in and my account information and balance was displayed.

This cannot be right! Surely closing all browser windows should logout of online banking.

mebu60

https://forums.moneysavingexpert.com/discussion/comment/82122631#Comment_82122631

@[Deleted User] it was indeed the Online Bonus Triple Access Issue 9. As the amount exceeded Principality's £20k limit using the normal withdrawal route I was directed to another process which I completed. It said expect next working day but it was actually processed and received same day. Via FPS. I had slightly more than £100k in there but decided not to risk complicating matters and stuck to the FPS limit.

InvesterJones

https://forums.moneysavingexpert.com/discussion/comment/82122830#Comment_82122830

Depends how long you let your cookies/tokens etc. last before expiring. Closing windows doesn't usually do any kind of logging out, always make sure to actually log out before closing browser sessions.

dosh37

https://forums.moneysavingexpert.com/discussion/comment/82122830#Comment_82122830

I think what is happening is that despite the 'Something's gone wrong' message, the system has actually logged the customer into Tesco online banking. The Tesco Banking website remains in a state such that you can't actually do anything. If you close all browser windows, Tesco Banking doesn't automatically log you out. Hence the next time you visit the website you find you are still logged in and all your details are immediately visible. This looks highly insecure to me.

BTW my Firefox is configured to delete ALL cookies on browser exit.

Despite the decent interest rate I think I am going to withdraw my deposit and close the account.

ColdIron

https://forums.moneysavingexpert.com/discussion/comment/82122796#Comment_82122796

Are you saying it worked one day (to check the £1) and not the next, i.e. a transient problem? The obvious question is what changed between then?

If clearing cache and cookies doesn't work try starting in Troubleshooting mode (via Help). It will disable addons, extensions, themes etc. If that works the work backwards to find the culprit

dosh37

https://forums.moneysavingexpert.com/discussion/comment/82122864#Comment_82122864

I suspect things may also be affected by how you login to Tesco Banking. When I originally logged in to deposit the initial £1 I followed the Login link from the Tesco Bank homepage. Subsequently I used a saved bookmark.

ColdIron

https://forums.moneysavingexpert.com/discussion/comment/82122872#Comment_82122872

Yes, highly likely, That would be the change between the first and second time. Have you tried the obvious?

dosh37

https://forums.moneysavingexpert.com/discussion/comment/82122861#Comment_82122861

You are right - after a search it appears that closing a browser does not automatically log out of internet banking. However, how is a user supposed to logout if the website is stuck on an error page with no 'Logout' button and no indication that he/she is currently logged in?

friolento

https://forums.moneysavingexpert.com/discussion/comment/82122895#Comment_82122895

From the Tesco Bank FAQ "As a security measure, we'll log you out of Online Banking if you've been inactive for 5 minutes."