Steps we take
Making your online transactions as safe and secure as possible
As a bank we are used to thinking about security. The growth of the Internet has offered greater flexibility for us all, but it also brings new risks that must be guarded against. At HSBC we use industry standard security technology and practices, focusing on three key areas - privacy, technology and identification - to safeguard your account from any unauthorised access.
Privacy | ||
 | ||
We use industry standard encryption within our internet banking services.
Secure Sessions
When you log in to Internet Banking you are said to be in a secure session. You know you are in a secure session if the URL address begins with https:// or a padlock symbol appears in the lower right hand corner of your browser.
Encryption
Secure Sockets Layer (SSL) Encryption technology is used within your Internet Banking session to encrypt your personal information before it leaves your computer to ensure no one else can read it. Depending on your browser setting, a pop-up window will appear to notify you that you will be entering a secured page. At HSBC, we use 128-bit SSL Encryption, which is accepted as the industry standard level. Any email service within Internet Banking is similarly protected with encryption technology (unlike your regular email which is not usually secure).
Session time-out
If you forget to log-off after banking online, or your computer remains inactive for a period of time during a session, then our systems automatically log you off. Pages viewed during a secure session are not recorded in your PC's temporary files.
Technology | ||
| ||
We use many layers of security – for obvious reasons we cannot disclose all of them, but the following are typically used:
Identification privacy | ||
| ||
We use log-ins and passwords to make sure we're dealing with you. It is vital that you do not share your password and do not use the same password for other services (e.g. Yahoo, Hotmail).
Automatic lock-out
After a number of incorrect attempts to log in, we disable online access to your account. To re-activate your account, you should contact your relationship manager.
