Enhanced Login: Is It Really Necessary?

Posted by Sun on August 3, 2006
Advertisements

Think you have enough online passwords to remember? How about adding a couple of more questions each you try to access your account?

Recently, there is a wave to improve securities at several financial institutions by adopting the so-call “enhanced login process”. For the past month, among various accounts I own, I have seen HSBC Direct, ING Direct, and EmigrantDirect followed one another to change their logins.

For HSBC, there isn’t really any change to my opinion. Before, they have user name and password on the same page. The new login process simply splits the user name and password: I first enter my user name, then a new page comes up where I type in my password. I didn’t see any enhanced security features and I don’t understand how this can prove security as they claimed.

At ING Direct, the new process contains two parts: in the first part, I need to kind of “register your computer by selecting and naming an icon (it actually is a picture) and ING asks me if the computer is the primary computer that I use to access my account (From my knowledge, Bank of America did this early this year). The second part asks me to answer 5 out of 10 questions as an extra layer of protection. The good thing of ING’s new process is that once I registered my computer, those questions won’t show up in the login process unless I try to access my account from another computer. I only need to enter my password.

The biggest hassle came from EmigrantDirect. To setup the new login process, I was also asked to provide 5 out of 10 security question answers. Among them, 5 are standard questions from EmigrantDirect. If I am not happy with these five, I have to come up with different ones. Once this the setup is done, I start to login by first typing in my user name. Then in the new page, I not only have to give my password, but also answer 2 out of those 5 security questions! Even worst, my answers are shown right on the screen!

For me, these enhanced features didn’t really make me feel safer about my accounts. Rather, I saw some of them as unnecessary. Getting access to my own accounts shouldn’t become a headache. I’d rather take precautionary steps, such as use a firewall, install anti-virus and anti-spyware software, and clean-up my computer regularly, than being asked a bounch of questions.

If you found information on this Diary helpful, please consider subscribing to the full RSS feed (What's RSS feed?), or enter your email below to receive free daily update.

Your address is secure and will only be used to deliver the contents of this Diary. You can unsubscribe at any time.

Related Articles You Don't Want To Miss
Categories : Random thoughts Tags:

Comments

No comments yet, but your thoughts are always welcome.


Sorry, the comment form is closed at this time.

invisible tracker