Two-fold authentication for online banking
Two-fold authentication for online banking
Author
Discussion

fivesixseven8

Original Poster:

6,146 posts

249 months

Thursday 18th June 2009
quotequote all
Is driving me fking mad!

Do they seriously expect me to carry a fking pocket calculator straight from the 80's around on the off chance that I need to do something online?

I didn't ask for this and they tell me there is no opt out available as it's being forced by FSA regs? Has anyone managed to get out of having to use one?

Poor rant I know. Had to get it off the chest though!

moosepig

1,306 posts

263 months

Thursday 18th June 2009
quotequote all
I don't see what the problem is. I have this (with NatWest) and it's only required when adding a new payment recipient. You don't need it for doing stuff like transferring between your own accounts, paying your credit card, making a payment to someone who is already on your list of payees...

I've had to use it perhaps twice in the last 3 years. I'd hardly call that an inconvenience when you bear in mind the extra security that it provides.

You were right about one thing though - poor rant wink

Dupont666

22,481 posts

214 months

Thursday 18th June 2009
quotequote all
explain 2 fold authentication and why a calculator, im confused?

Lucie W

3,473 posts

204 months

Thursday 18th June 2009
quotequote all
I've only ever had to use mine once, and I use online banking almost daily.

Don

28,378 posts

306 months

Thursday 18th June 2009
quotequote all
Dupont666 said:
explain 2 fold authentication and why a calculator, im confused?
So first of all you log in to on-line banking successfully.

Then if you try and transfer money from your account to someone else's the system asks for confirmation of your ID a second time in a different way.

The banking website gives you a number. You put your bank card into a little device they give you that looks like a pocket calculator but has a slot for your card. You type in the number they gave you and your PIN. It gives you back another number that you type into the website.

By doing this they know that:

1) You have the bank card
2) You knew its PIN

before they take your money and give it to someone else.

JJCW

2,449 posts

208 months

Thursday 18th June 2009
quotequote all
moosepig said:
I don't see what the problem is. I have this (with NatWest) and it's only required when adding a new payment recipient. You don't need it for doing stuff like transferring between your own accounts, paying your credit card, making a payment to someone who is already on your list of payees...

I've had to use it perhaps twice in the last 3 years. I'd hardly call that an inconvenience when you bear in mind the extra security that it provides.

You were right about one thing though - poor rant wink
Barclays version requires the calculator to even log into your online banking.

Neil_H

15,407 posts

273 months

Thursday 18th June 2009
quotequote all
Yes I'm with Barclays, it's irritating and obviously done for morons whose PCS are riddled with spyware and who get suckered by spam emails asking them to send their passwords.

Famous Graham

26,553 posts

247 months

Thursday 18th June 2009
quotequote all
fivesixseven8 said:
it's being forced by FSA regs?
I call bs on that one. My First Direct account never needed it (used it up until about a year ago) and my current Nationwide one doesn't either.

tegwin

1,678 posts

228 months

Thursday 18th June 2009
quotequote all
Yup.. Drives me MAD as well... I dont ever keep my card near my pc....


Its like taking a massive step backwards!

Dupont666

22,481 posts

214 months

Thursday 18th June 2009
quotequote all
Don said:
Dupont666 said:
explain 2 fold authentication and why a calculator, im confused?
So first of all you log in to on-line banking successfully.

Then if you try and transfer money from your account to someone else's the system asks for confirmation of your ID a second time in a different way.

The banking website gives you a number. You put your bank card into a little device they give you that looks like a pocket calculator but has a slot for your card. You type in the number they gave you and your PIN. It gives you back another number that you type into the website.

By doing this they know that:

1) You have the bank card
2) You knew its PIN

before they take your money and give it to someone else.
From what you have told me im still lost...

I ring up, talk to a human being (always UK based thanks to my card), say I want a bill payment to be made, tell them the other account details and the subject matter that will appear on mine/their statement...

10 seconds of them telling me what i said... its done.

Why not use that?

Targarama

14,715 posts

305 months

Thursday 18th June 2009
quotequote all
Neil_H said:
Yes I'm with Barclays, it's irritating and obviously done for morons whose PCS are riddled with spyware and who get suckered by spam emails asking them to send their passwords.
For Barclays all you need to do is take a list of a few 'passcodes' with you for use when you're away from the device. This is an 8 digit number you generate - just generate some and write them down. There does not appear to be a timestamp in the checksum.

JJCW

2,449 posts

208 months

Thursday 18th June 2009
quotequote all
Dupont666 said:
Don said:
Dupont666 said:
explain 2 fold authentication and why a calculator, im confused?
So first of all you log in to on-line banking successfully.

Then if you try and transfer money from your account to someone else's the system asks for confirmation of your ID a second time in a different way.

The banking website gives you a number. You put your bank card into a little device they give you that looks like a pocket calculator but has a slot for your card. You type in the number they gave you and your PIN. It gives you back another number that you type into the website.

By doing this they know that:

1) You have the bank card
2) You knew its PIN

before they take your money and give it to someone else.
From what you have told me im still lost...

I ring up, talk to a human being (always UK based thanks to my card), say I want a bill payment to be made, tell them the other account details and the subject matter that will appear on mine/their statement...

10 seconds of them telling me what i said... its done.

Why not use that?
Perhaps he wanted to use online banking?

Davi

17,153 posts

242 months

Thursday 18th June 2009
quotequote all
Famous Graham said:
fivesixseven8 said:
it's being forced by FSA regs?
I call bs on that one. My First Direct account never needed it (used it up until about a year ago) and my current Nationwide one doesn't either.
confused

My nationwide one has needed one for the last 18 months! Both times I've needed to use it I've not had the card reader with me so I just cleared the account smile

Famous Graham

26,553 posts

247 months

Thursday 18th June 2009
quotequote all
Davi said:
Famous Graham said:
fivesixseven8 said:
it's being forced by FSA regs?
I call bs on that one. My First Direct account never needed it (used it up until about a year ago) and my current Nationwide one doesn't either.
confused

My nationwide one has needed one for the last 18 months! Both times I've needed to use it I've not had the card reader with me so I just cleared the account smile
What can I say - I don't biggrin It asks me for my customer number, an item of "secret data" (some made up word or number or whatever that I set when I started online banking) and 3 of the digits from a 6 digit number generated at the same time.

Only opened the account last October.

Davi

17,153 posts

242 months

Thursday 18th June 2009
quotequote all
Famous Graham said:
Davi said:
Famous Graham said:
fivesixseven8 said:
it's being forced by FSA regs?
I call bs on that one. My First Direct account never needed it (used it up until about a year ago) and my current Nationwide one doesn't either.
confused

My nationwide one has needed one for the last 18 months! Both times I've needed to use it I've not had the card reader with me so I just cleared the account smile
What can I say - I don't biggrin It asks me for my customer number, an item of "secret data" (some made up word or number or whatever that I set when I started online banking) and 3 of the digits from a 6 digit number generated at the same time.

Only opened the account last October.
Have you tried transferring funds yet..? Funny timing for this to come up though as it was only yesterday I emptied the account.

Don

28,378 posts

306 months

Thursday 18th June 2009
quotequote all
Dupont666 said:
Don said:
Dupont666 said:
explain 2 fold authentication and why a calculator, im confused?
So first of all you log in to on-line banking successfully.

Then if you try and transfer money from your account to someone else's the system asks for confirmation of your ID a second time in a different way.

The banking website gives you a number. You put your bank card into a little device they give you that looks like a pocket calculator but has a slot for your card. You type in the number they gave you and your PIN. It gives you back another number that you type into the website.

By doing this they know that:

1) You have the bank card
2) You knew its PIN

before they take your money and give it to someone else.
From what you have told me im still lost...

I ring up, talk to a human being (always UK based thanks to my card), say I want a bill payment to be made, tell them the other account details and the subject matter that will appear on mine/their statement...

10 seconds of them telling me what i said... its done.

Why not use that?
One can do telephone banking of course.

Which is where you talk to a human being who types stuff into a computer.

Instead of typing stuff into a computer yourself. And in my case - more accurately and faster. hehe

Famous Graham

26,553 posts

247 months

Thursday 18th June 2009
quotequote all
Davi said:
Famous Graham said:
Davi said:
Famous Graham said:
fivesixseven8 said:
it's being forced by FSA regs?
I call bs on that one. My First Direct account never needed it (used it up until about a year ago) and my current Nationwide one doesn't either.
confused

My nationwide one has needed one for the last 18 months! Both times I've needed to use it I've not had the card reader with me so I just cleared the account smile
What can I say - I don't biggrin It asks me for my customer number, an item of "secret data" (some made up word or number or whatever that I set when I started online banking) and 3 of the digits from a 6 digit number generated at the same time.

Only opened the account last October.
Have you tried transferring funds yet..? Funny timing for this to come up though as it was only yesterday I emptied the account.
Yup - have a couple of standing orders in there and have manually transferred to my landlady a couple of times earlier in the year.

fivesixseven8

Original Poster:

6,146 posts

249 months

Thursday 18th June 2009
quotequote all
moosepig said:
I don't see what the problem is. I have this (with NatWest) and it's only required when adding a new payment recipient. You don't need it for doing stuff like transferring between your own accounts, paying your credit card, making a payment to someone who is already on your list of payees...

I've had to use it perhaps twice in the last 3 years. I'd hardly call that an inconvenience when you bear in mind the extra security that it provides.

You were right about one thing though - poor rant wink
If Natwest only want it to setup new transfers then that is a much better implementation than my bank have gone with.

For those people who either don't have to use one, or only have to use it for setting up new payments/transfers; Can I ask you to let me know what bank you use as I am tempted to switch.

71notout

3,674 posts

259 months

Thursday 18th June 2009
quotequote all
You think you got it bad mate?

I had to performance test this technology before it went live! (RBS version)

Neil_H

15,407 posts

273 months

Thursday 18th June 2009
quotequote all
Targarama said:
Neil_H said:
Yes I'm with Barclays, it's irritating and obviously done for morons whose PCS are riddled with spyware and who get suckered by spam emails asking them to send their passwords.
For Barclays all you need to do is take a list of a few 'passcodes' with you for use when you're away from the device. This is an 8 digit number you generate - just generate some and write them down. There does not appear to be a timestamp in the checksum.
That's great until you need to pay a bill or transfer money to someone, when you have to type the amount in.