Is Banking With Echo Safe?
As support for Echo is increasing day by day with skill development, various services are surfacing. Primality built as a music player cum voice assistant, Alexa can also be used for banking services. Capital one along with developers working for www amazon com echosetup or www.amazon.com/echosetup have built a skill for banking facilities.
Banking over the internet has always been an issue of safety. However with release of HTTPS or secure socket layer, banking has been made extremely safe over the internet. As Echo and Alexa do not have a pictorial interface, the scenario here is a bit different. Amazon echo setup has been configured to add skills easily to it and capital one skill is one of those. Now we will discuss various aspects of banking with Alexa to decide if it is safe or not:
The Lock Factor
HTTPS shows a green lock in URL bar claiming that connection is safe. However, as echo and amazon echo tap and amazon echo dot do not have a video graphical interface, we cannot be sure that connection is secure. If the connection is unsecure, it is very likely that the input we gave using our Echo or echo dot is likely to be transmitted to any third party.
Data sent over the internet is being encrypted by a 128 bit secure encryption key. Encryption ensures that no one can peek into our data. However when we read terms and conditions of capital one bank skill on echo help section, there was nowhere encryption was mentioned. In simple words, there is a big chance that even if amazon or skill builders are not peeking into our data, there can be any hacker looking into it hence robbing us off while we send our credentials from echo tap at our home.
Terms and conditions + Credential vocal announcement
The devil always lies in the details. We do not know what kind of terms and conditions we are agreeing to. Similarly, we will have to say our credentials out loud as amazon.com echo setup clearly said that capital one skill does not support banking credential entering from supporting smart phone. Double edged sword of privacy is a big issue.