: Replacement keys typically take 5 to 10 working days to arrive at a home address. Activation of Your New Key
| Threat | Legacy Secure Key | Project Nexus Solution | |--------|------------------|------------------------| | Man-in-the-middle phishing | Vulnerable (OTP captured) | FIDO2 origin binding: browser verifies domain | | SIM swap attack | High risk (SMS fallback) | No SMS fallback; device-bound key can’t be migrated | | Malware on PC | OTP visible on screen | Private key never leaves secure enclave; biometric required | | Lost device | Attacker knows PIN? Could generate OTP | Remote wipe via HSBC portal + separate recovery phrase (BIP39-like) | hsbc replacement secure key exclusive
While HSBC continues to support physical devices for some regions, the bank is aggressively transitioning customers to the for enhanced convenience and environmental benefits. Physical Secure Key Digital Secure Key (Mobile App) Portability Separate card/calculator-sized device Built into your smartphone Authentication 6-digit passcode + physical PIN Biometrics (Face ID/Fingerprint) or PIN Battery Life Typically 5 years; non-replaceable N/A (Uses phone battery) Wait Time Up to 10–14 working days for delivery Instant activation via the app How to Get Your Replacement 1. Switching to a Digital Secure Key (Fastest Method) : Replacement keys typically take 5 to 10
HSBC has a dirty little secret for customers demanding a physical : They do have them, but you have to be difficult—politely. Physical Secure Key Digital Secure Key (Mobile App)
HSBC Secure Key is a mandatory two-factor authentication tool that generates unique, one-time security codes required for logging into online banking and authorizing high-risk transactions, such as new payments or personal detail updates
Moving Beyond the Plastic: Your Guide to the HSBC Replacement Secure Key