by Crivens » Thu Jul 19, 2007 2:10 pm
When you setup the business account you pay an extra £20 or so (there is a more pricey but better protected one apparently) and you get the device through the post. Once you phone up to activate it then that is it. When you want to do any transfers online then you simply press the button on the device and it gives you a number. This is basically the current password (valid only for a minute or so) to allow you to transfer funds.
Using this method then no-one can transfer funds even if they know your main online password (unless they get hold of the keyfob and the password obviously, but is one extra level of security). Plus there is no way for anyone to use a background process to monitor your key presses. The UK Lloyds TSB one I have just asks for the password again. The main security they have on my account is when logging into the site it asks for random characters of my secret password (different to the main one). You can't get in otherwise. Eventually though a clever enough key logger will get all the characters required to login to your account. Main security over all this is sheer anonymity. There is so many people on the web that being unfortunate to be hit is incredibly unlikely, plus a lot more people these days are protected to the hilt with virus killers and whatnot.
Cheers