Here’s a deep review of the process, covering user experience, security implications, recovery steps, and common complaints. 1. What Is the HSBC Secure Key? The Secure Key is HSBC’s two-factor authentication (2FA) device (physical token) or the digital version inside the HSBC mobile app. It generates a 6–8 digit code to authorize high-risk transactions (e.g., adding a payee, changing limits, making large transfers).