For online banking, banks and savings banks offer various so-called backup processes for the authorization of payments (for example, transfers):
- HBCI-Plus (classic TAN method) - supported in Outbank
- FinTS with PIN / TAN (one- or two-step TAN method) - supported in Outbank
- HBCI / FinTS with chip card (RDH, DDV, SECCOS) - not supported in Outbank
- HBCI / FinTS with key file - not supported in Outbank
Outbank supports all two-step TAN procedures approved by the ZKA (Central Credit Committee):
- Indicated TAN method (iTAN)
- Mobile TAN (SMS-TAN)
- Optical and manual Chip-TAN process with chipcard (HHD-UC v1.3 to v.1.4)
- PhotoTAN
- PushTAN
- BestSign
Currently, almost all banks and savings banks are implementing the safer optical chipTAN method. All you need is the normal EC card and a TAN generator (e.g., https://www.chipkartenleser-shop.de/shop/rsct/group/1751 price around 14 Euro).
This allows you to do payments with outbank for macOS and iOS. The TAN generated in each case is only valid for the individual job and is generated according to the "2 device authentication" principle, independently of the terminal in the TAN generator. Thus a "phishing" attack is not possible.
The "HBCI with chipcard" method, on the other hand, requires a much more expensive stationary chipcard reader and current device driver. This is always subjected to a PC or Mac.
For questions regarding the respective TAN method or card reader please ask the corresponding bank or savings bank. Basically almost all major banks and savings banks offer besides HBCI with Chipkarte also the optical ChipTAN procedure.