How can I enable my browser to use 128-bit encryption?
Depending upon the browser you are using you can check whether 128-bit SSL is being used in the following ways:
For Microsoft Internet Explorer
- Move your mouse over the 'security lock icon' at the bottom-right corner. A tool-tip of "SSL secured (128-bit)" should pop up if you are connected using 128 Bit SSL; OR
- From the 'File' menu in the toolbar, select 'Properties'. "Connection" with "SSL 3.0, RC4 with 128-bit encryption (High); RSA with 1024 bit exchange" is shown if you are connected using 128 Bit SSL.
How can I assure myself that I am connecting to HSBC?
For Microsoft Internet Explorer
Depending upon the browser you are using you can check whether you are connected to HSBC in the following ways:
Sample screen shot of Internet Explorer's certificate for your reference:
- Click the 'security lock icon' at the bottom right corner (enable status bar if it cannot be seen)
- Check that the certificate information is displayed with one of the following domain names as issued to: www.ebanking.hsbc.com.xx, www#.ebanking.hsbc.com.xx, www.ebanking.hsbc.co.xx, www.ebanking.xx.hsbc.com, www.ebanking.hsbc.xx or www.ebankinglocal.hsbc.co.xx (where "xx" represents specific country code and "#" represents server alias.) Issued by = www.VeriSign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97VeriSign Valid from = "?is a valid date (Check if this certificate is within a valid date).
If, after clicking the security padlock icon you find any message different from what is illustrated above, contact HSBC for more information or assistance.
How can I create and protect my HSBC Internet Banking passwords?
To create your HSBC Internet Banking passwords, please follow the tips below:
To protect your HSBC Internet Banking passwords, we strongly recommend that you
- Select a passwords that cannot be easily guessed by anyone else. Do not associate your HSBC Internet Banking passwords with anything personal such as your HSBC Internet Banking username, birthdays, names, phone numbers or other familiar words.
- Do not use an HSBC Internet Banking username and passwords which are used on other Internet sites/ISP servers.
- Create a passwords with a combination of letters and numbers using upper and lower cases, eg hu6N3Rw2. Avoid using repetitive or consecutive digits in your HSBC Internet Banking passwords, eg 111222, abababa.
- Do not disclose your HSBC Internet Banking username, passwords and security code to any other party. Remember no one at HSBC will ever ask for a customer's confidential personal data.
- Never write or record your HSBC Internet Banking passwords in a way that can be read or understood by someone else, or on any software which retains it automatically.
- Check your account balances and statements regularly to identify any unusual transactions. You should check the last logon time-stamp each time you log on.
- If you suspect your HSBC Internet Banking passwords has become known by someone else, you should change it immediately at HSBC Internet Banking.
- Contact HSBC immediately if you suspect any unusual or unauthorised account access to your HSBC Internet Banking accounts.
In such circumstances, you should also change your passwords immediately by selecting the 'Change HSBC Internet Banking passwords' option under the 'Services' section of HSBC Internet Banking.
- Change your HSBC Internet Banking passwords on a regular basis.
- Know everyone who uses your computer to stop someone from loading software to capture your HSBC Internet Banking username and passwords.
EV SSL Certificate
HSBC introduces the latest internet security measure with the adoption of EV SSL Certificate (Extended Validation SSL Certificate). With this verification certificate in place, you can instantly know you're on a genuine HSBC website.
How does this affect me?
Once the new certificate has been introduced, you will see a change to the URL address bar area at the top of your browser when you visit the secure sessions of HSBC website (indicated by "https://" at the beginning of the URL). The name of the certificate owner (The Hongkong and Shanghai Banking Corporation Limited) will be displayed either on the URL address bar or near the top of the browser. This indicates the successful verification of the site's identity. The changes will look slightly different depending on the browser you use.
Internet Explorer: The URL address bar will turn green with the company and certificate issuer names displayed in alternation.
Firefox: The name of the company will be highlighted in green inside the URL address bar.
Safari: The name of the company will be shown in green near the top right corner of browser.
Google Chrome: The URL address bar will turn yellow and display the name of the company.
When will I see the changes?
The certificate will be rolled-out on HSBC websites in 4 phases:
Do I need to do anything differently?
You don't need to install any software. However, please make sure your browser version meets the following minimum requirements. We highly recommend that you upgrade your browser version to take advantage of this internet security measure.
Browser version minimum requirement:
What if I can't see any changes on the URL address bar after the service roll-out?
Please check if your browser version meets the minimum requirements stated above. If you still cannot see the changes after fulfilling the requirements and suspect the site to be a fraudulent HSBC site, please follow the instructions here to report to us.