Hsbc Digital Secure Key

It generates temporary, single-use codes that expire shortly after creation.

Digital Secure Key | Seamless and secure banking – HSBC IN hsbc digital secure key

Overall, HSBC's Digital Secure Key is a convenient and secure way to protect your online banking transactions and prevent identity theft. It generates temporary, single-use codes that expire shortly

Functionally, the Digital Secure Key supports two core operations: and transaction signing . When a customer logs into HSBC online banking from a new or unrecognized device, the app prompts them to open the Digital Secure Key, which generates a six-digit numeric code. For transaction signing—such as adding a new payee or transferring large sums—the process requires an additional layer: the user enters the last few characters of the payee’s account number into the app, which then generates a transaction-specific code. This ensures that even if malware intercepts the user’s session, it cannot alter the transaction details without breaking the cryptographic signature. When a customer logs into HSBC online banking

This time, Emily was asked to generate a new 6-digit code using the HSBC Secure Key app. She did so, and the customer service representative used the code to verify her identity. After verifying her identity, the representative assured Emily that they would freeze her account and investigate the suspicious transaction.

Physical tokens are immune to computer viruses. Digital Secure Keys, however, exist on a general-purpose computing device (a smartphone). If a user’s phone is compromised by sophisticated malware (such as a banking trojan), there is a theoretical risk of screen overlay attacks or keylogging, though the app sandboxing on iOS and Android mitigates this significantly.