Digital Secure Key

A Digital Secure Key is an extra layer of security for your bank account, which lets us know it’s really you that’s accessing your account. It’s built into the first direct App, and does all this…

lets you to log on to Mobile and Online Banking securely
generates a temporary code you'll need when sending money to someone new
helps keep your bank account safe from fraudsters
allows you to log on to Mobile Banking using your face or fingerprint.

You'll be prompted to activate your Digital Secure Key when you register for Mobile and Online Banking. If you didn't activate it then, here's what to do:

open the first direct App on your device
enter your username
verify it's you by using Photo ID and Selfie (this is a good option if you don’t have your existing device). Alternatively, if you don't have valid ID, you can use your full password and an activation code sent via text. If you already have a Secure Key on another device, you can also use a QR code from that device
follow the on-screen instructions to complete the set up
create and confirm your new Digital Secure Key PIN

You can now log in to our App using the Digital Secure Key PIN you've just created.

If you are switching over from a Physical Secure Key to a Digital Secure Key, follow these instructions:

download the first direct App on a compatible device if you haven’t already
enter your username
verify it's you by using Photo ID and Selfie. Alternatively, if you don't have valid ID, you can use your full password and a One-Time Passcode sent via text, or a code generated on your Physical Secure Key
follow the steps to complete the chosen action
create and confirm your new Digital Secure Key PIN

You can now log on to Mobile Banking from this device or generate a code to access your Online Banking. You can also set up face or fingerprint recognition, if it’s available on your device, to log on next time.

As soon as you've activated your Digital Secure Key, we'll automatically deactivate your old Physical Secure Key to help keep your account secure.

Want to recycle your old Physical Secure Key? You can pop it into any branch of HSBC UK or post it to us for free at:

FREEPOST

HSBC

SKR CENTRE

Your Digital Secure Key is part of our 'two-factor authentication' security system, and a bit like having an extra lock (a very fancy one) on your front door.

A password is one level of security (or one ‘factor’). But fraudsters can try and guess passwords, making them vulnerable. Two-factor authentication means there’s another layer of security (on top of your password) to keep you even more secure. Your Digital Secure Key generates a one-time security code each time you log on, meaning it’s much harder for fraudsters to breach.

Frequently Asked Questions

How do I generate a security code with my Digital Secure Key?

To generate a security code with your Digital Secure Key, just follow these steps:

open our App
if you've got Fingerprint or Face ID set up, select 'Cancel'
select 'Generate a security code'
select 'Log on security code' from the list
enter your Digital Secure Key PIN and select 'Generate a code'. If you have face or fingerprint recognition set-up, this can also be used to generate a code
your log on security code will be displayed.

Which phones and devices will the Digital Secure Key work with?

The Digital Secure Key is compatible with the following devices...

Apple: compatible with iPhone, iPad and iPod touch. Requires iOS 14 or later.
Android: any mobile device running Android 9 or later.

We regularly update our Mobile App to introduce new features, and make improvements and occasionally, that means the App’s compatibility with operating systems may change. We’ll keep this information updated here, so you can always check. Beta versions of Operating Systems aren't supported and may cause unexpected behaviour with our App.

Can I have more than one Secure Key, or use someone else’s?

What happens if I change or sell the phone I have my Digital Secure Key on?

If you're selling your phone, make sure you deactivate your Digital Secure Key before you do. You can do this by going to 'Menu' on the App, then 'Security Settings' and selecting 'Manage devices'.

If you've changed your phone, see Setting up our App on a new phone to find out what to do.

What should I do if my phone gets lost or stolen?

Call us on 03 456 100 100 as soon as you can, so we can deactivate both your Digital Secure Key and the App.

What happens if you find your phone later? No problem. You'll just need to re-install our App on your phone and then set up your Digital Secure Key again. View Setting up our App on a new phone to find out what to do.

What options do you have for customers with accessibility needs?

What should I do if someone asks me to deactivate my Digital Secure Key or share activation codes?

Criminals pretend to be people you trust, like the first direct fraud team or even the police.

At first direct, we'll never ask you to deactivate your Secure Key unless you've contacted us to report a problem. No other genuine organisation will ever ask you to do this, either.

Only fraudsters will ask you to deactivate your Secure Key or to share an activation code. If in doubt, hang up and call us back on 03 456 100 100.

What do I do if I see the message 'Existing device not found'?

You'll need to call on 03 456 100 100 and we’ll send you one out in the post.

Please bear in mind it can take up to 10 working days for your Secure Key to arrive. So if you need to get access to Online Banking sooner, you’ll find a Digital Secure Key much faster to set up and easier to use in the long run.

Google Play and the Google Play logo are trademarks of Google LLC. App Store is a service mark of Apple Inc.

Digital Secure Key

What is a Digital Secure Key?

How do I get a Digital Secure Key?

Switching over from a Physical Secure Key?

How does a Digital Secure Key keep my account safe?