Security

Kotak Mobile Banking app is safe and secure

Kotak Mobile Banking platform uses the secured HTTPS protocol for communication between the mobile client and the mobile server. This ensures all your transactions are encrypted and completely secure.

Kotak Mobile Banking App uses two factor authentications. Two-factor authentication is a security mechanism that requires two types of credentials for authentication and is designed to provide an additional layer of validation, minimizing security breaches.

Kotak Mobile Banking App requires a login password (MPIN) for performing any transaction. Also when you download the app and register it on your device, you will receive an activation code on your registered mobile number. Without this code you cannot activate the app on your device.

Our mobile banking platform uses secure HTTPS protocol for communication between the mobile client and the mobile server. Secure Hyper Text Transfer Protocol (HTTPS) uses HTTP, but, additionally activates Web server security, in the form of Secure Sockets Layer (SSL). This means that the communications between the client and the (host) Web server are encrypted. This is a highly secured environment to conduct your transactions. Additionally, all application related information stored in the device is encrypted.

Types of Mobile Fraud you need to be aware of

Lost / stolen devices

Although mobile phones and tablets are convenient to use, they are also easy to lose and can put your account at risk. We recommend the following precautions:

Never share your MPIN with anyone
In case your device is lost or stolen, call our Customer Contact Centre (1860 266 2666) immediately and get your mobile banking app deactivated in that device
Protect your device with a password so that it cannot be accessed by others without having access to your device's password
Set automatic screen-lock on your device when it is not active
Protect your devices from online viruses, malwares and threats using anti-virus software
Avoid routing your device as such devices are prone to higher risk

Fake Mobile Banking App

Fraudsters may develop and publish fake mobile banking applications that look like the official Kotak Mobile Banking App to steal your online banking credentials. The following tips will help you recognize a fake app:

Check the developer of the application. The app store will show Kotak Mahindra Bank Ltd. as the developer only for the official app.
Download the app only from the registered app stores - Google Play Store, Apple App store
Kotak Mobile Banking app is a free app. If you find any paid app for Kotak Mahindra bank, please report it to the bank immediately.
You can also visit app.kotak.com to download the authentic apps of Kotak Mahindra Bank

Checksum

Retail Mobile Banking

Platform	Version	Checksum
Android	5.5.0	MD5: 8FE8450B3BC058CD63218895A1AEA149 SHA1 : 7641B84E6043FD7F6C5C344576619E29035CE508 SHA-256 : D9EA830932457CF66CB95E4E8D17DB75FCEB4FE1AE5D2FA69D3B21902321AC50
iOS	5.3.8	MD5: eeb21a5ae5cc828016c6fb66948fb1b6 SHA1 : 220eb677c4abca270f214807077762601a8447a4 SHA-256 : cf3052183e53200d41aba401b4e271a88ddc0b5fd4e3a7620037289a49d7ff24
Android	5.4.8	MD5: 8FE8450B3BC058CD63218895A1AEA149 SHA1 : 7641B84E6043FD7F6C5C344576619E29035CE508 SHA-256 : D9EA830932457CF66CB95E4E8D17DB75FCEB4FE1AE5D2FA69D3B21902321AC50
iOS	5.3.7	MD5: 07325369adf9e02ea743e9a52def0ff6 SHA1 : d74234cf4e502b45d5b2d706fe914f3ec34866ee SHA-256 : a4acc69b2ea6479ddb9326245f02793551fde1cc0648ec7640704b6d13c79228
Android	5.4.7	MD5:8FE8450B3BC058CD63218895A1AEA149 SHA1 : 7641B84E6043FD7F6C5C344576619E29035CE508 SHA-256 : D9EA830932457CF66CB95E4E8D17DB75FCEB4FE1AE5D2FA69D3B21902321AC50
iOS	5.3.5	MD5:b5416713ed1c80e121c057731fab056d SHA1 : 571aa6b76fd84f1496e72d1acdb31a09c0f304c6 SHA-256 : 1cd85e50576a99c9dd399a5214255cfd747f0c480d8bb02112c1c7c4f2e7a0df
Android	5.4.4	MD5:8F:E8:45:0B:3B:C0:58:CD:63:21:88:95:A1:AE:A1:49 SHA1 : 76:41:B8:4E:60:43:FD:7F:6C:5C:34:45:76:61:9E:29:03:5C:E5:08 SHA-256 : D9:EA:83:09:32:45:7C:F6:6C:B9:5E:4E:8D:17:DB:75:FC:EB:4F:E1:AE:5D:2F:A6:9D:3B:21:90:23:21:AC:50 5.4.3
Android	5.4.3	MD5 : 8F:E8:45:0B:3B:C0:58:CD:63:21:88:95:A1:AE:A1:49 SHA1 : 76:41:B8:4E:60:43:FD:7F:6C:5C:34:45:76:61:9E:29:03:5C:E5:08 SHA-256 : D9:EA:83:09:32:45:7C:F6:6C:B9:5E:4E:8D:17:DB:75:FC:EB:4F:E1:AE:5D:2F:A6:9D:3B:21:90:23:21:AC:50
Android	5.3.5	SHA-256:D9EA830932457CF66CB95E4E8D17DB75FCEB4FE1AE5D2FA69D3B21902321AC50 SHA1 : 7641B84E6043FD7F6C5C344576619E29035CE508
iOS	5.3.3	SHA-1 : acd85a04124864ef189cb0b8f5dd9b655ffdbdbd SHA -256 : acd85a04124864ef189cb0b8f5dd9b655ffdbdbd MD5 : 83e6c3031a448f19df46d7755b31cedb
iOS	5.3.2	SHA-1 : 8c06996e07c315f340e6c7675dbab89059ddd787 SHA -256 : 8c06996e07c315f340e6c7675dbab89059ddd787 MD5 : 73713a2ca9ea2f769fcc9e4566f15cbc
iOS	5.2.5	SHA256: d48b0eebf5e801d43cdf55d6425cb49e0a0b302173312f5dc5c1e4bce20ea1d1 SHA1: fd003c67286846117931762636f89b167ac6e483
Android	5.3.4	SHA-256: D9EA830932457CF66CB95E4E8D17DB75FCEB4FE1AE5D2FA69D3B21902321AC50 SHA1 : 7641B84E6043FD7F6C5C344576619E29035CE508
iOS	5.2.4	SHA256: f5538a23e00435f852148155e1dd37d4c2b31cdd6781e41eedb60fd88e4855fd SHA1: 75f6dae9ff3b1a8612bda514a222530e05f68131

Corporate Mobile Banking

Platform	Version	Checksum
Android	V4.0	SHA-256:784E8017ABF09D14D883106AF3DEBEB7AFDFFF6AA883197D3A62E79A76E94169 SHA1 : 0A383DA0880DD2C49820AADEBEEFBF6AC55519B5
IOS	v2.8	SHA-256:2d1c86b5568caeacef367911bfefc7965ef80997997c5e2619ac9497af6037ac SHA1 : 30507743620610f0121a7bac516a83b8c2870259
Android	v3.0	SHA-256:12DF2D52ED48EA2663E50FEADFB1A08EE638E4153DE6AB843678E651FF02E5D5 SHA1 : a44A0FA42BF8E613108A14E7C6C306ACEACC3852
iOS	v2.2	SHA256: 5050cb505e14050be3276e6b8d43ca248874385afe62cfb16c047e5f6cdd1bb2 SHA1: 8af8fefd716055673b252dfb35a00c6b77dee4d4

A checksum is a value used to verify the integrity of a file or a data transfer. In other words, it is a sum that checks the integrity of data/file ; this assures the receiver that the files/data has not been compromised.

Features of Checksum Validation

To verify that the content in the file is of integral nature
To confirm that the file has neither been altered by unauthorized third party, nor been damaged during the transfer process across the internet
To act as signature of the file.

Frequently Asked Questions

How do I get the Kotak Mobile Banking App?

Download the Kotak Mobile Banking app from app.kotak.com or go to application stores - Apple App Store / Google Play Store You can also SMS 'Mobile' to 9971056767 / 5676788 to receive the link on your registered mobile number.