Changes to bank web security

If you're using their app, no, because your mobile can use wifi to talk to the bank.

If they're using SMS for authentication codes, you need some way to deliver that SMS. Various SMS to email / SMS over wifi systems exist.

If they're using voice calls, you need some way to receive those voice calls. Register a landline number, or a mobile number that diverts to landline.

So not in practice, but you might have to set something up to achieve it. These aren't options for people who can't set up such systems, though.

Theo

Yes, at least to make payments, also for purchases online or in shops.

Mostly soluble with a card reader. see:

If I could only persuade my bank that they can send SMS to my land line that would be fine, however their systems (or their people maybe) can't believe that a non 07xxx number can receive texts.

ISTR the Barclays app will give you a "PinSentry" code without a mobile or WiFi signal.

So far, I've resisted the temptation to set up a mobile phone at all for banking. I do all of mine through a big desktop which would not be particularly easy to steal.

But the security options do seem to be getting better.

Yup.

Barclays has said this will be one option.

Google manage to send a one-time-code via text-to-speech to my landline without any problem.

No. they are using a OTP based on time and some secret that they do need to download when setting it up.

The HSBC has been doing it for a few years now but with a dongle to generate the codes, that is being discontinued in favour of the online app.

I had a similar notification a few days ago, with various links offering help, support etc which just seemed to take me into a forest of options, none of which seemed relevant to my query, which was:

'As I don't do Internet banking, only have a current account, my mobile phone is twenty years old and hardly ever used, and although I buy things in shops and over the Internet via my PC, I either pay by debit card or by Paypal. Is any of this relevant to me?'.

I see they offer me three options: Download the Barclays App; Text message to my mobile or use a PINsentry card reader.

Perhaps others a bit more clued up on these things could answer my question. Is any of this relevant to me?

Most 2FA devices that use SMS or the internet should also have the ability to generate a code for use when the networks aren't available.

In fact, I will restate that as: Any organisation that isn't a mickey mouse outfit will have a mechanism in place for when networks aren't available.

For Google and Facebook, you can generate a code (or set of codes) for one-time standalone use.

SMS is an option from 2 banks; 1 is going to require DoB on log-in, so yet another reason to avoid any dubious computers (mine is the only one that I trust; the router's wifi is off). I wouldn't use an app., or do any financial work on a 'phone. My cards are shielded but I'm sort of guessing that shielding a 'phone is rather counter-productive.

You might need one of them to setup new people to pay from your account, you do for HSBC. There is something about needing a verification for some thing bought on cards to help prevent fraud. I don't know what level of transaction they require it at.

Chris Hogg snipped-for-privacy@privacy.net posted

If you use a debit card online, presumably it will be relevant to you, because you'll need to use 2FA when they introduce it.

I have no mobile reception at my home. As yet I don't know how this is going to work, except for Tesco, which has allowed me to set up a separate authentication password for online purchases. Rather like the old Verified by Visa system.

The card reader solution would suit me best - I already use one for business banking - but my bank(s) haven't mentioned it as a possibility for personal banking.

It shouldn't matter if you use WiFi the apps should encrypt anything they send. Thats one of their security features.

Using the web is another matter but even that should be encrypted if its https.

The app is probably the most secure way to do it. Also if anything happens the bank is responsible if their app isn't secure enough.

That is a good link. Thank you.

So ? Will they sort out all the work needed if their "app" splurges your data everywhere ?

If you have no mobile phone reception at all but you have an internet connection, you can buy a femtocell/picocell.

This plugs into your broadband router and is effectively a mobile phone mast. Then you now have a mobile phone signal on your phone in your house.

All the big four mobile providers offer femtocells or picocells.

Google for suresignal to get you started!

That would then permit you to set up 2FA on your bank account and mobile phone.

Re femtocells:

Vodafone use sure signal

O2 use boostbox

EE use signal box

All are one off purchases and you need to register the mobile phone numbers on them as this then stops other people hogging your broadband line for mobile related stuff.

it's a feature of EE signal boxes that they allow e.g neighbours or passing strangers to use the signal given out by the femto-cell.

I have a Vodafone Suresignal which they sent me for free when I renewed my contract. I wonder if the EE box also works for Plusnet. I thought some 3 phones could use wifi.

Interesting post though as I was thinking that I might be locked into Vodafone.