Hsbc Internet Banking Security Device -

The device provides (the physical token) plus something you know (your online banking password). Without physical possession of the token, an attacker cannot complete high-risk actions even if they steal the password.

| Generation | Form Factor | Display | Battery Life | Features | |------------|-------------|---------|--------------|-----------| | Gen 1 (Classic) | Key fob | 6-digit LCD | ~3–5 years | Button-activated OTP | | Gen 2 (Mini) | Credit card-sized | 8-digit LCD | ~4 years | Slimmer, longer battery | | Gen 3 (Display Card) | Card with integrated screen | 6-digit LCD | ~3 years | More durable, waterproof | | Business Secure Key | Larger device with PIN pad | Alphanumeric LCD | ~5 years | Requires PIN to generate OTP, supports transaction signing | hsbc internet banking security device

| Method | Security Level | Convenience | Cost | Phishing Resistance | |--------|----------------|-------------|------|----------------------| | HSBC Physical Secure Key | Very High | Low | High (hardware + postage) | Very High | | SMS OTP | Medium | High | Low | Low (SIM swap, SS7) | | Digital Secure Key (App) | High | Very High | Low | High (if app checks URL) | | Authenticator App (TOTP) | High | High | Zero | Medium (no transaction signing) | The device provides (the physical token) plus something