One of the key issues that banks are failing to address is the changing nature of personal computing. People now connect to online banks from unsecured wireless networks and no longer from a single identifiable PC in the safety of the home. Mobile devices and PDAs further complicate matters. Alliance & Leicester should be commended for its move to two-factor identification. But why stop at two? Bluetooth security dongles linked to a PC or unique identifying phone calls made from individually registered mobile devices offer further options.