Transaction authentication number: Difference between revisions

Revision as of 13:32, 9 March 2007

Revision as of 19:55, 26 March 2007

Line 14:

TANs are believed to provide additional security because they act as a form of [[two-factor authentication]]. Should the physical document containing the TANs be stolen, it will be of little use without the password; conversely, if the login data are obtained, no transactions can be performed without a valid TAN.

Should the client system become compromised by some form of [[malware]] that enables a [[cracker|malicious user]] to obtain both the login data and a TAN number (in some systems, a TAN is usable for some minutes after the initial insertion), the possibility of an unauthorisedunauthorized transaction is high. It should be noticed that the remaining TANs remain uncompromised and can be used safely, even though action should be taken by the user as soonssoon as possible.

{{Unreferencedsect|date=January 2007}}