HSBC Money Management Tools Security Statement
HSBC Bank USA, N.A.'s role in security
It's important to you, and to us
We maintain strict security standards and procedures to prevent unauthorized access to information about you. We use leading technologies such as data encryption, firewalls, server authentication, and digital certificates to protect the security of your data. We also require the use of 128–bit encryption browsers or a browser that supports Server Gated Cryptography (SGC). SGC allows a browser using 40–bit encryption to function as if it has 128–bit encryption for the duration of the session.
Browsers (such as Netscape or Internet Explorer) using 128–bit encryption (or supporting Server Gated Cryptography) provide the highest level of commercially available security for your financial transactions. Encryption transforms the banking transactions you send over the Internet into code that can then be translated by us.
A Digital Certificate is a randomly generated set of characters that our computer sends to your browser. The browser on your computer stores this information and uses it to verify that the Internet address is actually HSBC Bank USA, N.A. and not someone masquerading as the Bank. It can be used in the same way a passport or driver's license is used as a means to establish identity.
Your role in security
You have a significant role to play in security.
There are two pieces of important information that you must keep confidential – your Personal Internet Banking Username and Password. These are the keys to your access into the Service.
General online security tips
- Install and regularly update virus detection software.
- Do not allow unauthorized access to your PC.
- Do not install pirated software or software from an unknown source.
- Do not open email attachments from unknown sources.
- Conduct financial transactions first in any online session. After completing financial transactions online, including credit card purchases, logoff before continuing other online activity. This may help protect your confidential data (account numbers, passwords, etc.)
- Notify your financial institution immediately of any erroneous changes in your account information.
Internet Security Tips, Guidelines for Strong Passwords
- Don't share your Password with anyone.
- Memorize your Password. Don't write it down or store it on your computer.
- Use upper and lower case letters, numbers and symbols.
- Avoid common words or obvious names. Think of a phrase that's memorable to you but not to others. (For example, "My left-handed brother has two green eyes" becomes "Ml_bh2Ge".)
- Use Passwords that are at least eight characters long.
- Change Passwords regularly (at least every 90 days).
For your added security, HSBC has updated a session time–out feature. If your Personal Internet Banking session is idle for 9 minutes, a warning notice will appear giving you the opportunity to either continue or to logoff the session. The system allows you 1 minute to respond before your session is automatically ended. This is done to protect your accounts from unauthorized access if your PC is left unattended and you are unable to exit normally. You will then need to log back on to Personal Internet Banking in order to access your Money Management tools.
You are responsible for maintaining the confidentiality of your Personal Internet Banking Username and Password. Aggregating outside accounts to the Money Management tools will require that you also provide authentication for your other online accounts that you wish to add to Money Management tools. For your convenience, an auto–login feature is available that allows "click through" access directly to your online services. You can disable the auto–login feature, by account, at any time. However, the importance of protecting your Personal Internet Banking log on information is increased significantly when using the auto–login feature, as direct access to your online services is enabled.
Although every precaution has been taken to offer the service using state–of–the–art security measures, there is a risk of unauthorized access to your personal information if you fail to exercise adequate controls over your login information. Your use of Money Management tools acknowledges that this risk exists and that neither HSBC nor any service provider therein is liable to you for any harm or damage that may occur.