The world's local bank
The Security of Our Systems:
128-Bit SSL Encryption
HSBC requires the use of 128-bit Secure Socket Layer (SSL) Encryption, with all Personal Internet Banking applications and online application forms, which is the highest and most secure form of data security available on the Internet today. Encryption converts your data (i.e. when you apply for a loan or credit card at HSBC or when you use Internet Banking) into an encoded form before it is sent over the Internet. The encryption helps keep your information private between the bank's computer system and your Internet browser.
To determine if the browser you are using supports 128-bit encryption try a browser check.
Internal Systems Encryption
HSBC employs multiple levels of encryption with multiple encryption algorithms on and between internal systems to help ensure your data is kept secure and inaccessible to unauthorized users.
Firewalls
HSBC uses firewalls to block potentially destructive information from entering our computer systems and to prevent unauthorized access. Firewall software can be installed on business and home computers as a barrier against hackers and viruses.
Digital Certificates
To protect your computer and your account information when using Personal Internet Banking, HSBC Bank Canada uses Digital Certificates to allow you to ensure you are communicating with HSBC. When you log on to HSBC Bank Canada, your browser challenges the HSBC website to prove its identity using digital certificates. Your browser can verify the certificate and will alert you if the website is not HSBC. When logging on to HSBC, you should always ensure that this identity check has occurred. For instance in Microsoft® Internet Explorer, ensuring that the yellow lock is present on the lower left hand corner of the browser and double-clicking it allows you to view the digital certificate of the website your browser has verified. You can determine if it is the correct website by ensuring that the certificate is issued to 'www.ebank.hsbc.ca'.
Security Device
HSBC Bank Canada is committed to safeguarding your sensitive financial information. We have introduced a Security Device, needed to access Business Internet Banking. Each Security Device generates a series of single-use Security Codes unique to the user's account. By using these Security Codes together with your Username and Password, your online security is increased.
Server Gated Cryptography (SGC)
HSBC uses Server Gated Cryptography or SGC, which allows a browser using 40-bit SSL encryption to function as 128-bit encryption for the duration of the online banking session. This helps keep your online banking transaction information as secure as possible without having to download an updated browser.
Keeping Your Online Sessions Secure:
Secured Sessions
Your HSBC Internet Banking session is protected in a "secured" environment through Secured Socket Layer (SSL) encryption. SSL technology is used within your Internet Banking session to encrypt your personal information before it leaves your computer to help ensure no one else can read it. Depending on your browser setting, a pop-up window will appear to notify you that you will be entering a secured page. You will know when you are on a secured HSBC page when you see the “https://” before the web address. A padlock symbol in the lower right hand corner of your browser window will also be present. A closed padlock indicates that your HSBC online session is in a "secured" environment.
Your Internet Banking Session
For Personal Internet Banking:
Logon, Personal Identification, and Random Challenge Password Feature
To make accessing your HSBC Bank Canada accounts more secure, we require that after obtaining your Personal Access Number, you create your personal identification question and response, and your password to logon to HSBC’s secured Internet Banking site. This information is then authenticated by HSBC’s system to verify your identity before providing account access. Your personal identification question and answer is a key element to differentiate HSBC from “phishing ” sites. The random challenge password feature protects your password from being captured by keystroke logging tools that are planted into your home PC through virus attack.
Logon Attempts
For added security, we protect your online banking access by tracking the number of logon attempts. After a number of incorrect personal identification response attempts, we will disable your online access temporarily. You may either try to logon again after several minutes or contact HSBC to re-establish access by phone. After a number of incorrect passwords attempts, we will immediately disable online access. Should this happen, you will need to contact HSBC to re-establish access by phone.
Session Time-out
For your protection, HSBC includes a Session Time-out feature for your online banking session. If your Internet Banking session remains idle for a given time, your session automatically ends. This helps to protect your accounts from unauthorized access if your PC is left unattended or you have not logged-off from your Internet Banking session.
For Business Internet Banking:
Logon and Password Feature
Each Business Internet Banking User Name, Password and Security Device is unique to the specific individual. The system of a personalized user name helps restrict access to your Business Internet Banking account. To benefit fully from this protection, you must ensure that your Business Internet Banking User Name(s) and Password(s) are kept secure and secret at all times.
Logon Attempts
For added security, we protect your online banking access by tracking the number of logon attempts. After a number of incorrect passwords attempts, we will immediately disable online access. You will then need to contact HSBC to re-establish access either by phone (completed online).
Session Time-out
For your protection, HSBC includes a Session Time-out feature for your online banking session. If your Internet banking session remains idle for a given time, your session is ended automatically. This is done to help protect your accounts from unauthorized access if your PC is left unattended or you have not logged-off your Internet banking session.
Secure Email
To protect any private information you may send to us via email, HSBC provides a secure email feature within Business Internet Banking so that your correspondence and your information remains between you and HSBC.
