Nationwide Building Society has issued an update regarding its account security measures, clarifying its policies after a customer raised questions about the adoption of passkeys. The inquiry followed new guidance from the National Cyber Security Centre (NCSC), which operates under GCHQ, recommending that people switch from traditional passwords to passkeys, describing them as "more secure."
NCSC Guidance on Passkeys
In guidance published on April 23, the NCSC stated: "The digital industry is moving rapidly towards offering passwordless authentication for logging into online services and accounts, and many major platforms already support it. The NCSC supports the public adoption of passkeys and recommends using passkeys over passwords wherever available." Passkeys work by generating a unique piece of digital data that connects a device to the service being accessed, often requiring biometric verification such as a fingerprint scan or facial recognition, or a PIN code.
Customer Query and Nationwide's Response
Following the NCSC's recommendations, a Nationwide member sought clarity on whether the building society would implement passkeys. The customer wrote: "Nationwide does not appear to have issued a statement about why it does not use them for banking. As your customer I would like a statement please about when you will adopt passkeys." Nationwide responded by outlining its current policies, stating: "At present Nationwide has not adopted passkeys; any future changes will be clearly communicated in advance. We don't currently have an announcement or timeline to share on passkeys. However, we appreciate you taking the time to raise this topic."
Current Account Access Rules
The process for logging into online banking with Nationwide varies depending on the method used. For app users, options include logging in with a fingerprint via Touch ID, verifying identity through Face ID using the camera, or entering selected digits from the passnumber. To access internet banking, customers must first open the login page, then enter their customer number and date of birth before selecting continue. Subsequently, they can either input their passnumber and receive a verification code via text message, or use their debit card and card reader to complete the sign-in process.
