New AIB Mobile app on the way

anyone with a tablet now cannot login to AIB, can only use their phone
That’s been the case for some time in reality. AIB had a tablet app which they withdrew some years ago, and converted to a link to the desktop version. It was possible to install the old app on an iPad, but it switched to portrait mode and looked ridiculous. And the only allow one registered device so it was a case of either phone or tablet, not both.
 
It worked on my unfolded phone before and now it doesnt.. so whatever they are doing is just making it worse for customers.. the business with my PAC was also worrying...
 
I've got the new app now. Not bad, looks nice and is fairly intuitive. No stock trading options or anything like that but seems to do the essentials nicely
 
IOS, It has a "normal" type login now, no switching on the login if you remember that bit. Looks very shiny when in the Home Screen, tabs running across the top to separate accounts into All, Savings (with totals if more than one savings account), mortgages general etc. All the payment functionality seems to be roughly the same. There is investment and insurance tabs but its more a link to the webpages of their private banking and insurance arms than being able to trade direct. Loans and credit cards seem doable through the app. I'm not someone who uses the app for more than basic stuff but it looks decent on the face of it
 
What about a budgeting tool? I think I saw somewhere to say that new AIB app will have it. I remember when the budgeting tool was available on AIB but was later removed for some reason.
 
What about a budgeting tool? I think I saw somewhere to say that new AIB app will have it. I remember when the budgeting tool was available on AIB but was later removed for some reason.

The old budgeting tool was very handy so sorely missed. They did mention in their advertising that the new app will have a budgeting tool also.
 
Another advance notification e-mail from AIB about the new App - suggesting that a lot of users who rely on touch/Face ID have forgotton their quaintly named PAC (PIN number)

Beggars belief that AIB are continuing to use a very weak 5 digit (i.e. numbers only) PIN code as the basis for securing access to online accounts.


We're nearly there with our brand new app.
You'll need your 5-digit Personal Access Code (PAC) the first time you log into the new app. After that, you can set up a passkey (face or fingerprint) to log in quickly and easily. Or, you can continue to use your PAC.
If you can't remember your PAC, you can reset it. Here's how.
• If you usually use Face ID to login to your AIB app, open the app but hold your phone away so it can't use your face to sign in.
• When you see 'Face Not Recognised', tap 'Cancel'.
• Tap 'Log in manually' and 'Continue'. You'll see the Log in screen with your registration number.
• Tap 'Trouble logging in?', 'Reset PAC' and 'Continue'.
• Enter the last four digits of one of your debit cards, and that card's PIN. Tap 'Continue'.
• Choose your new PAC, enter it in both boxes, and tap 'Reset PAC'.
For a useful video showing how to reset your PAC, go to aib.ie/get-access
Your new app will be available over the coming months. If someone you know gets it sooner, don't worry, it is on its way to you.
For more, go to http://www.aib.ie/newapp (www.aib.ie/newapp)
The AIB Team
 
"You'll need your 5-digit Personal Access Code (PAC) the first time you log into the new app. After that, you can set up a passkey (face or fingerprint) to log in quickly and easily. Or, you can continue to use your PAC."

The choice is the end-user's, bio-verification or PAC. Seems fair enough to offer choice.
 
Not a fan of the new app. I like that you can see full details of transactions in the history. But twice now I've nearly sent external transfers without "saving" the reference info I'd entered on the separate screen; including that should be the default.
 
The choice is the end-user's, bio-verification or PAC. Seems fair enough to offer choice.

But it's not actually a choice - I'm very comfortable using biometric passkeys, but in AIB's implementation, opting to use these does not shutdown or block the weak 5 digit PIN. That remains active and vulnerable at all times.

Yeah, but it still leaves accounts vulnerable to access via a code with only 1,000,000 possible combinations.

It's worse than that. 5 digits maxes out at 100,000 (and can be a lot less depending on the implementation rules) at which level it is extremely vulnerable to attack, in particular to techniques such as password spraying.
 
Last edited:
I'd imagine it's an attempt to include those users whose older, perhaps desktop, systems don't have cameras attached or embedded in the monitors. 2FA for those users still works, but by emailing rather than texting the one-off access code, so maybe not as vulnerable as at first glance.
 
Lots of finance apps fall back to a PIN if you don't use the biometrics. Some even have a 4 digit pin.
 
Back
Top