Why can't I still use my password to confirm it's me when I'm shopping online?

The Payment Services Directive 2 (PSD2) is a piece of European Union (EU) legislation that aims to make banking safer, more transparent and innovative. The legislation includes Strong Customer Authentication (SCA), which requires you to confirm it's you using '2 factors' when you pay for things.

There are 3 factors - something you know (e.g. a password or PIN), something you are (e.g. a fingerprint), or something you have (e.g. a registered mobile phone)

Your password is only 1 factor, so we've replaced this with easy to use '2 factor' ways to confirm it's you instead.

You can confirm it's you by using:

  • a PINsentry device with your card and PIN
  • a one-time verification we can text to your mobile phone
  • our app. It's the most convenient and easy way -  just a few taps and you're done. You need to be 18 or over to use the app. T&Cs apply.