1. Home
  2. Security


Bank Safe Online is a one-stop advice website which has been set up by APACS, the UK payments association. To keep up to date on online security issues, please visit

Our guarantee

If a Halifax customer is a victim of fraud involving the Internet, we will guarantee that they will not lose any money as a result of the fraud, and we will reimburse them in full.

How is my information kept secure on the internet?

The best way to ensure online security is to use the most recent version of a recommended Internet browser which offers the latest encryption technology. Currently the latest versions of Firefox and Microsoft Internet Explorer offer this technology.

What is encryption?

Encryption is a way of coding information to make it virtually impossible for someone else to read, unless they have the 'key' to decipher it.

The effectiveness of encryption is measured in bits (binary digits). The latest web browsers available from Microsoft and Firefox offer 128-bit encryption technology. Halifax cannot be used without 128-bit encryption - for your security and peace of mind.

What does Secure Sockets Layer (SSL) mean?

SSL provides a secure communications link between your browser and Halifax. All information passed back and forth is encrypted. SSL is now supported by all major browsers and is generally accepted as a way of doing business securely over the internet.

How should I protect my security details?

  • Never write them down
  • Never share them with anyone else
  • Never include them in an email
  • Keep your password secure:
    • Create a strong password. An easy way to create a strong password is to combine three completely unrelated words, replace some letters with numbers and include a mixture of upper & lower case, for example:
      Radio, Marmalade and Sunny together make Radi0marmalad3Sunny. (But obviously, don’t use this specific example).
    • Don’t use anything obvious. Don’t use your user name or personal details. Don’t use your child or pet’s name, birthdays, email address or anything else that can easily be guessed.
    • Don’t recycle passwords. Like going from password2 to password3.

In addition,

  • Never leave your PC unattended when logged in placing business, especially without a screen lock. We recommend that you log out if you leave your PC unattended.
  • When logging in, make sure that no-one can see what you're typing.
  • Always log out and close your browser when you have finished placing business.
  • Never respond to emails that request you to reply with your security details, including those that appear to be from Halifax.
  • Remember that protecting your User ID, password and memorable information is your responsibility.

Security certificate

When entering secure websites you should always check the security certificate and look out for warning messages. Double-clicking the padlock symbol displayed on your browser will tell you the level of security being used.

However, changes to the technology used by VeriSign, the issuer of our website security certificate, means that older versions of Internet Explorer (version 4 and older versions of IE5) are unable to read updated certificates. An alert may appear suggesting that our security certificate is not valid - this is not true. If you choose to 'OK' the alert you will still be able to proceed and use the online banking service as normal.

If you are getting this security alert then we suggest you update your browser to version IE6 or later to correct this problem. If you'd like to update your browser you can visit the Microsoft Internet Explorer homepage. (Please note Halifax is not responsible for the content of external websites.)

How can I help prevent someone else finding out my details?

When visiting the Halifax website always complete your task before leaving the site. Never leave your computer unattended while you are on the internet, especially when you are logged in. Always log out before leaving the site.

How can I protect myself from computer viruses?

We recommend that you use virus detection software to keep your computer free from known viruses.

Our tracker rate mortgages are linked to Bank of England bank rate (also known as Bank of England repo rate). Details of this rate can be found on the Bank of England website at

For independent information on mortgages, visit the website 'Money Advice Service'.

If you do not have professional experience, you should not rely on the information contained in this communication. If you are a professional and you reproduce any part of the information contained in this communication, to be used with or to advise retail clients, you must ensure it conforms to the Financial Conduct Authority's advising and selling rules. This site is intended for UK residents unless otherwise stated.

Halifax is a division of Bank of Scotland plc. Registered in Scotland No.SC327000. Registered Office: The Mound, Edinburgh EH1 1YZ. Copyright © , Halifax plc. All rights reserved.