Citibank One Time Password (OTP)

[dajop]

Are you sure? OTP via the iPhone app works for me with aircraft mode switched on, so I don't think connectivity is required.

I think you need phone connectivity at some point to lock it to the device, and once done, then can use over wifi. It won't lock to my ipod, when I ask for OTP through ipod it sends it to my blackberry (as a "network alert", not as an SMS). When I enter the OTP it tells me there's an error with incorrect parameters but it works anyway if I ignore the error.

 

[DeKa]

I think you need phone connectivity at some point to lock it to the device, and once done, then can use over wifi. It won't lock to my ipod, when I ask for OTP through ipod it sends it to my blackberry (as a "network alert", not as an SMS). When I enter the OTP it tells me there's an error with incorrect parameters but it works anyway if I ignore the error.

You need connectivity the first time, then once your phone has 'become a token' shall we say, no connectivity is required at all. The app must have the algorithm built in (much like a physical token). I assure you my Citi app generates an OTP when offline.

 

[dajop]

You need connectivity the first time, then once your phone has 'become a token' shall we say, no connectivity is required at all. The app must have the algorithm built in (much like a physical token). I assure you my Citi app generates an OTP when offline.

Yes I know, my partner has it working perfectly with that algorithm via iphone . But I am not using an i-phone, just an ipod (and also tried on ipad), both without telephony -so I can never get that first time connectivity. Anyway not that much of an issue, because OTP SMS's to my (international , ie Singapore) mobile are now working fine. Before cutover to the new requirement for OTP the SMS's didn't work at all.

 

[DeKa]

Yes I know, my partner has it working perfectly with that algorithm via iphone . But I am not using an i-phone, just an ipod (and also tried on ipad), both without telephony -so I can never get that first time connectivity. Anyway not that much of an issue, because OTP SMS's to my (international , ie Singapore) mobile are now working fine. Before cutover to the new requirement for OTP the SMS's didn't work at all.

It may work on a non iPhone. Just have the first time SMS sent to you other handset, and enter that code into the iPod /iPad?

 

[Baysider]

Are you sure? OTP via the iPhone app works for me with aircraft mode switched on, so I don't think connectivity is required.

Yep, just tested this. Turned off wifi and mobile data on my phone and it still generates a OTP.

However, you do first have to receive the message that your device has been "locked to your account".

 

[dajop]

It may work on a non iPhone. Just have the first time SMS sent to you other handset, and enter that code into the iPod /iPad?

Tried that, didn't work. When trying to do this, it doesn't actually send an SMS, it sends something over the data network to the other handset, and when entering that code it comes up with an error, so have to repeat this every time wanting access. Never mind.

 

[DeKa]

Tried that, didn't work. When trying to do this, it doesn't actually send an SMS, it sends something over the data network to the other handset, and when entering that code it comes up with an error, so have to repeat this every time wanting access. Never mind.

Actually I think it may have been USSD not an SMS

http://en.m.wikipedia.org/wiki/Unstructured_Supplementary_Service_Data

Mine looked like this

http://godhc.files.wordpress.com/2011/04/photo.png

 

[jingles]

I thought nothing of it at the time, but having skimmed this thread, I'm now wondering whether I (or ING) should be concerned about the first one having gone missing. Is it potentially a security risk? Of course, it is possible that it was not actually sent out the first time, due to an oversight, but they would surely have a record of the serial number.

There should be no security risk.
Someone would need to know your username and password before the token was any use to them.

Well I've just gotten off the phone asking for a credit limit increase (no go) and asked about hard token generators.
Apparently I'm not eligible because I've got an Android phone and that you have to fulfil certain requirements. When I asked what happens when I've run out of power or don't have my phone with me, she suggested I just charge it lol.

That isn't the best procedure, especially when travelling.
If you lose your phone or it is stolen you are locked out of your account until you can come back into Australia and obtain a replacement sim card.

If you only have a credit card with them it isn't such a big deal as there is not really a need to be able to log in as they email you your statement.

 

[MEL_Traveller]

sooo frustrating...I am going overseas shortly. I have an iPad, it's 3G but I don't have a sim in it, just use wifi.

i want to get the OTP generator, but it seems I need to be connected to a phone sim for at least the first time? I don't have any other idevice.

can I just put any sim into the iPad for a one time link to lock in OTP?

 

[Baysider]

can I just put any sim into the iPad for a one time link to lock in OTP?

I would think so.

 

[MEL_Traveller]

I would think so.

ok, I'll give it a go

 

[DeKa]

It won't work as the iPad can't receive SMS.

 

[robd]

It won't work as the iPad can't receive SMS.

What DeKa said. Won't work on iPad.

 

[MEL_Traveller]

It won't work as the iPad can't receive SMS.

What DeKa said. Won't work on iPad.

ohhhh.

so... I'll have to call citibank from overseas and give them my local mobile so they can SMS me? annoying. thankfully it's only for cash advances. I'll just have to remember how much balance.

 

[robd]

ohhhh.

so... I'll have to call citibank from overseas and give them my local mobile so they can SMS me? annoying. thankfully it's only for cash advances. I'll just have to remember how much balance.

I'm thinking on that problem. If an OTP is registered to your phone, does it matter which SIM is in it? Is it using the SIM or the IMEI for verification?

 

[Baysider]

ohhhh.

so... I'll have to call citibank from overseas and give them my local mobile so they can SMS me? annoying. thankfully it's only for cash advances. I'll just have to remember how much balance.

Can't you just set up the App on your phone before you leave? Once it's installed there's no need to connect again. It's not SIM-specific. Once its on there it works whether you have phone service or not, just pops up a message saying "can not connect to host" and after you touch "OK" you can touch the generate one-time PIN button.

 

[robd]

Can't you just set up the App on your phone before you leave? Once it's installed there's no need to connect again. It's not SIM-specific. Once its on there it works whether you have phone service or not, just pops up a message saying "can not connect to host" and after you touch "OK" you can touch the generate one-time PIN button.

Just reading Citibank OTP FAQ's and I think this is correct.

 

[Baysider]

Just reading Citibank OTP FAQ's and I think this is correct.

Pretty sure I've used it with a Philippine SIM in my phone, and have definitely used it where I've had no phone reception outside Australia.

 

[MEL_Traveller]

I'm thinking on that problem. If an OTP is registered to your phone, does it matter which SIM is in it? Is it using the SIM or the IMEI for verification?

i don't have a smart phone. only an ipad. So SMS works ok here in AU, but can't set up the app to generate off-line OTPs overseas it seems

Will have to ring them while O/S to change to my friend's mobile to get SMSs

 

[robd]

i don't have a smart phone. only an ipad. So SMS works ok here in AU, but can't set up the app to generate off-line OTPs overseas it seems

Will have to ring them while O/S to change to my friend's mobile to get SMSs

It's easy to assume everyone has a smart phone - my bad