Nepal · Digital safety

Digital security best practices

Secure banking, passwords & online safety — Nepal · 2083

Why digital security matters Critical

In Nepal’s digital banking landscape, security breaches can lead to immediate financial loss. According to Nepal Police Cyber Bureau, digital fraud cases increased significantly in recent years. Your security practices directly determine your financial safety.

1. Password security master guide

The perfect password formula Important

Minimum 12 characters — Longer passwords are exponentially harder to crack.
Mix UPPERCASE, lowercase, numbers, symbols — Example: A@b3#dE9!fGh
No personal information — Avoid names, birthdates, phone numbers.
Unique for each service — Never reuse passwords.

Good password examples

M0uNt#Everest@2082 — Memorable but strong
K@thmanduValley$4Seasons — Phrase-based
N3p@l1D1g!t@l#Secure — Mix of elements

Bad password examples

nepal123 — Too short, predictable
password — Most common password
9841xxxxxx — Your phone number
sita2045 — Name + birth year

2. Banking-specific password guide

Mobile banking passwords Banking

Use 8–12+ characters with special symbols Most Nepali banks require 8+ characters with at least one uppercase, one number, and one symbol.
Enable biometric login Fingerprint or face adds a layer: even if someone knows your password, they need your device biometrics.
Set transaction PIN different from login Example: login password is complex; 4-digit transaction PIN is random (not your birth year).

Nepal banking tip: Many mobile banking apps lock after several failed attempts, which helps against brute-force attacks. Use strong passwords so you are not the weak link.

Internet / web banking passwords Banking

Web banking can be more exposed than mobile because:

Keyloggers can record keystrokes on shared or infected computers.
Public or shared PCs may have malware.
Phishing often targets web banking login pages.

Use the maximum allowed length If the bank allows 16 characters, use them.
Do not save the password in the browser Consider a dedicated password manager you trust.
Log out after every session Use the bank’s Log out control, not only closing the tab.

Real pattern in Nepal: Reusing the same password for email and web banking is dangerous: if email is breached, banking may follow. Use unique passwords for each.

3. Card security: PINs & CVV

Debit / credit card PIN security Card security

PIN creation (4-digit)

Avoid: 1234, 0000, 1111, obvious patterns, birth year, last 4 digits of the card.
Prefer: Random digits with no obvious pattern.
Change PIN periodically e.g. every few months at your bank’s ATM if you can.

Cover the PIN at ATMs and POS Shield the keypad; shoulder surfing happens in busy areas.
Memorize; do not write on the card If you must store a hint, disguise it—never label it “ATM PIN”.
CVV Never share the 3-digit CVV. Do not send photos of the card back to anyone “from the bank”.

Example: separate credentials (pattern) Illustration

Use different secrets for: mobile banking login, transaction PIN, ATM PIN, and email. Reusing the same simple password everywhere is the risk.

Stronger pattern (illustrative codes only)

Mobile login: M0unt@!nN3p@l#
Transaction PIN: four random digits
ATM PIN: different four digits
Email: Gm@!lF0rB@nk$ (unique)

Dangerous pattern

Same simple password for app + email
1234 for both transaction and ATM PIN

Use bank app settings: Enable biometrics, transaction limits, and SMS or app alerts where available.

4. Social media & email security

Social login & recovery risk Social

Attackers target social and email accounts to reset banking passwords or run social-engineering scams.

Platform	Best practices	Nepal context
Facebook	2FA, review login locations, strong unique password.	Sometimes linked to verification or recovery flows.
Gmail	Recovery options, security checkup, unique password.	Often the primary email for bank communication.
Viber / WhatsApp	App lock, two-step verification where available.	OTPs and bank messages may arrive on the phone.

Avoid “Login with Facebook/Google” for banking Use bank-issued credentials so a social hack does not cascade.
Review logged-in devices monthly Remove unknown sessions—especially after cyber cafés.

5. Two-factor authentication (2FA)

Use 2FA everywhere you can Must do

A second factor means that even with your password, an attacker still needs something else—your phone app, biometrics, or a token.

Method	How to enable	Security level
SMS OTP	Often on by default for Nepali banking.	Medium (SIM swap risk)
Authenticator app	Google Authenticator, Authy, or similar.	High (recommended for email/social)
Biometric	In mobile banking app settings.	High
Hardware token	Where your bank offers it.	Very high

Turn on app-based 2FA for Google / Facebook Security → 2-Step Verification → Authenticator app.
Save backup codes offline Print or write on paper; store securely—not in plain text in email.

SIM swap: If SMS OTPs behave oddly or you lose control of your number, contact your operator immediately and prefer app-based 2FA for important accounts.

6. Practical scenarios & what to do

Call: “Your card is blocked—share OTP to unblock.”

This is a scam. Legitimate staff will not ask for:

Full card number
CVV
OTP / SMS code
Internet banking password

Hang up. Call your bank using the number on the card or official website—not the caller’s number.

I must use banking at a cyber café

Very risky. If unavoidable:

Private / incognito window.
Do not save or download bank statements to that PC.
Clear history, cache, and cookies after.
Change password from your own device afterward.

Better: Mobile banking on your own phone with mobile data—not café Wi‑Fi.

Phone stolen with banking app installed

Act fast:

Contact your operator to block the SIM.
Call the bank’s helpline to freeze or secure accounts.
From another device, sign out other sessions if the bank offers it.
Report to Nepal Police Cyber Bureau if money is missing or accounts abused.

Prevention: screen lock, app lock for banking, and remote wipe if your platform supports it.

7. Monthly security checklist

Routine maintenance Maintenance

Review statements Flag unknown transactions immediately.
Rotate critical passwords Banking and primary email every 3–6 months—or after any breach worry.
Audit logged-in devices Google, Facebook, banking apps—remove what you do not recognize.
Backup important records Securely store copies of IDs and key banking papers—not in unencrypted public folders.
Check breach alerts Use a reputable breach-check service for your email and update passwords if needed.

8. Emergency contacts & resources

Nepal — save these numbers Emergency

Service	Contact	Purpose
Nepal Police Cyber Bureau	`01-4228435`	Report cyber crime, fraud
NTC customer care	`1415`	Block SIM, service issues
Ncell customer care	`9001`	Block SIM, service issues
NRB (regulator)	`01-4228074`	Banking regulatory complaints
Example: Nabil Bank 24/7	`01-5970000`	Card block, emergencies (verify on official site)

Tip: Save contacts with a clear prefix (e.g. “Emergency — Cyber Police”) and verify numbers on official websites—they can change.

Security mantra

Digital security is preparation, not paranoia. In a growing digital economy, your habits protect your money.

First step today: Strengthen your primary email or mobile banking password using the rules above—then enable 2FA where possible.