Centauri's Thoughts

CHARLOTTE, North Carolina (AP) -- Bank of America Corp. is rolling out a new security system aimed at thwarting efforts by online crooks to access its customers' accounts.


Passwords will no longer be enough.


With SiteKey, bank customers pick three challenge questions -- things only the customer would know, such as the year and model of the customer's first car -- and provide them with the traditional password to log on.


Customers can also verify they are indeed at Bank of America's Web site by clicking on a SiteKey button. If they fail to see a secret image and phrase they had chosen earlier, they could be at a fake Web site and the target of a "phishing" scam.


Until we have full biometrics this will be better security than just a password. I can see people forgetting which challenge questions go with which site though, ultimately causing more headaches if they get locked out after the 3rd or 5th try, because they pick the right challenge question.


The full story is here