Your KCB app PIN is weaker than you think, but a fix is coming
KCB Bank's mobile app has been found to only authenticate the last four digits of a six-digit PIN, despite allowing users to set longer codes. The bank has acknowledged the issue and promised a future update to align the interface with the security settings.
Why it matters
This highlights a significant security vulnerability in banking software where user expectations of security do not match the actual technical implementation.
If you use the KCB mobile banking app, you may want to pay close attention to how you log in.
An interesting discovery shared by a KCB customer on X has prompted an equally surprising response from the bank. According to the user, the app appears to authenticate six-digit PINs using only the last four digits, effectively ignoring the first two digits altogether.
Naturally, the customer wanted to know whether this was an intentional design choice or a security flaw. KCB's response was unexpected.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in