Input a specific authentication code shown on the banking screen if prompted.
Prevents unauthorized access even if someone steals your password, as they would still need the physical device or your biometric-protected phone. hsbc pinsentry
Unlike a simple TOTP token (like RSA SecurID), PINsentry is . It requires both something you have (your physical bank card) and something you know (your card’s PIN) to generate codes. Input a specific authentication code shown on the
The primary value of the PINSentry lies in multi-factor authentication. It requires "something you have" (the physical card and reader) and "something you know" (the card PIN). This makes it significantly harder for fraudsters to gain access remotely; even if a criminal steals a user’s login credentials, they cannot access the account without the physical device and the user's secret PIN. This approach was a pioneering step in the UK, where HSBC UK was among the first to implement such two-factor authentication. 3. Transition to Digital Secure Keys It requires both something you have (your physical
This second mode cryptographically binds the transaction details (payee, amount, reference) to the OTP, preventing an attacker from changing the transaction after you’ve signed it.
The rise of digital banking necessitated robust security measures to protect sensitive financial data. The emerged as a critical tool in this landscape, providing a physical layer of defense against cyber threats like phishing and unauthorized account access. 1. How the Device Functions
While the physical PINSentry remains a staple for many, the banking industry is shifting toward digital alternatives. HSBC India and other regions now offer a integrated directly into the mobile banking app. This digital version provides the same high level of security by generating codes on a smartphone, eliminating the need to carry a separate physical device while maintaining protection against unauthorized transfers. 4. Protecting Against Modern Scams Online Banking - HSBC USA