Changes to bank web security

Various banks are warning me that they will change the security arrangements for accessing their online accounts. There appears to be a need to be able to use their mobile phone app.

Should I conclude that I am going to need a mobile phone signal to access my bank account from a PC?

Reply to
Michael Chare
Loading thread data ...

If you're using their app, no, because your mobile can use wifi to talk to the bank.

If they're using SMS for authentication codes, you need some way to deliver that SMS. Various SMS to email / SMS over wifi systems exist.

If they're using voice calls, you need some way to receive those voice calls. Register a landline number, or a mobile number that diverts to landline.

So not in practice, but you might have to set something up to achieve it. These aren't options for people who can't set up such systems, though.

Theo

Reply to
Theo

Yes, at least to make payments, also for purchases online or in shops.

Reply to
Andy Burns

Mostly soluble with a card reader. see:

formatting link

Reply to
Max Demian

If I could only persuade my bank that they can send SMS to my land line that would be fine, however their systems (or their people maybe) can't believe that a non 07xxx number can receive texts.

Reply to
Chris Green

ISTR the Barclays app will give you a "PinSentry" code without a mobile or WiFi signal.

So far, I've resisted the temptation to set up a mobile phone at all for banking. I do all of mine through a big desktop which would not be particularly easy to steal.

But the security options do seem to be getting better.

Reply to
newshound

Yup.

Barclays has said this will be one option.

Google manage to send a one-time-code via text-to-speech to my landline without any problem.

Reply to
Andrew

No. they are using a OTP based on time and some secret that they do need to download when setting it up.

The HSBC has been doing it for a few years now but with a dongle to generate the codes, that is being discontinued in favour of the online app.

Reply to
dennis

I had a similar notification a few days ago, with various links offering help, support etc which just seemed to take me into a forest of options, none of which seemed relevant to my query, which was:

'As I don't do Internet banking, only have a current account, my mobile phone is twenty years old and hardly ever used, and although I buy things in shops and over the Internet via my PC, I either pay by debit card or by Paypal. Is any of this relevant to me?'.

I see they offer me three options: Download the Barclays App; Text message to my mobile or use a PINsentry card reader.

Perhaps others a bit more clued up on these things could answer my question. Is any of this relevant to me?

Reply to
Chris Hogg

Most 2FA devices that use SMS or the internet should also have the ability to generate a code for use when the networks aren't available.

In fact, I will restate that as: Any organisation that isn't a mickey mouse outfit will have a mechanism in place for when networks aren't available.

For Google and Facebook, you can generate a code (or set of codes) for one-time standalone use.

Reply to
Jethro_uk

SMS is an option from 2 banks; 1 is going to require DoB on log-in, so yet another reason to avoid any dubious computers (mine is the only one that I trust; the router's wifi is off). I wouldn't use an app., or do any financial work on a 'phone. My cards are shielded but I'm sort of guessing that shielding a 'phone is rather counter-productive.

Reply to
PeterC

You might need one of them to setup new people to pay from your account, you do for HSBC. There is something about needing a verification for some thing bought on cards to help prevent fraud. I don't know what level of transaction they require it at.

Reply to
dennis

Chris Hogg snipped-for-privacy@privacy.net posted

If you use a debit card online, presumably it will be relevant to you, because you'll need to use 2FA when they introduce it.

I have no mobile reception at my home. As yet I don't know how this is going to work, except for Tesco, which has allowed me to set up a separate authentication password for online purchases. Rather like the old Verified by Visa system.

The card reader solution would suit me best - I already use one for business banking - but my bank(s) haven't mentioned it as a possibility for personal banking.

Reply to
The Marquis Saint Evremonde

It shouldn't matter if you use WiFi the apps should encrypt anything they send. Thats one of their security features.

Using the web is another matter but even that should be encrypted if its https.

The app is probably the most secure way to do it. Also if anything happens the bank is responsible if their app isn't secure enough.

Reply to
dennis

That is a good link. Thank you.

Reply to
Michael Chare

So ? Will they sort out all the work needed if their "app" splurges your data everywhere ?

Reply to
Jethro_uk

If you have no mobile phone reception at all but you have an internet connection, you can buy a femtocell/picocell.

This plugs into your broadband router and is effectively a mobile phone mast. Then you now have a mobile phone signal on your phone in your house.

All the big four mobile providers offer femtocells or picocells.

Google for suresignal to get you started!

That would then permit you to set up 2FA on your bank account and mobile phone.

Reply to
stephenten

Re femtocells:

Vodafone use sure signal

O2 use boostbox

EE use signal box

3 use home signal.

All are one off purchases and you need to register the mobile phone numbers on them as this then stops other people hogging your broadband line for mobile related stuff.

Reply to
stephenten

it's a feature of EE signal boxes that they allow e.g neighbours or passing strangers to use the signal given out by the femto-cell.

Reply to
Andy Burns

I have a Vodafone Suresignal which they sent me for free when I renewed my contract. I wonder if the EE box also works for Plusnet. I thought some 3 phones could use wifi.

Interesting post though as I was thinking that I might be locked into Vodafone.

Reply to
Michael Chare

HomeOwnersHub website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.