After synthesising insights, we held a collaborative ideation and brainstorming session to explore potential features and approaches for improving the onboarding and authentication journeys. The sessions included UX designers, product managers, security experts, and stakeholders from HSBC’s global teams to ensure all perspectives were considered. The session was designed to generate ideas that could address password recall issues and high drop-off rates.
Session Goals:
- Generate solutions that align with both user needs and HSBC's security goals.
- Develop feature that could reduce friction in the onboarding process while also enhancing security.
- Explore practical ways to incorporate the promising use of biometric verification and DIVA-style selfie authentication.
We then mapped out ideas, grouping them into three categories:
- Password Alternatives & Recovery: we brainstormed ways to integrate more sophisticated biometric solutions, such as facial recognition or fingerprint scanning, into the onboarding and authentication flows. We also explored ideas around implementing password recovery via SMS or email with temporary codes.
- Streamlined Authentication: Exploring ways to reduce friction by adapting security measures based on user behaviour and device recognition. For instance, if a user is logging in from a previously verified device, they could bypass certain security steps.
- User Experience & Perception: Including clear, concise messaging to reassure users that their data is safe and that the authentication process is for their protection. This includes showing users progress bars or visual cues indicating where they are in the process and how long it will take.
At the end of the sessions, we prioritised the ideas that aligned with HSBC’s objectives. The most promising concepts, like integrating DIVA-style biometric login and adaptive authentication, were taken forward to the prototyping stage.