Shanono Key

A mobile soft token app that generates secure OTPs for authorising transactions

ShanonoKey — Secure Software Token for Business Banking ShanonoKey is Shanono Mobile's official mobile soft token application, designed to replace physical hardware tokens with a secure, convenient, and always-available digital alternative. When approving a high-value transfer, ShanonoKey generates the one-time password you need — instantly and securely.

What is a Soft Token? Traditional internet banking security relies on hardware tokens — small physical devices that display a changing numeric code every 30 seconds. While effective, hardware tokens can be lost, damaged, forgotten at home, or run out of battery at the worst possible moment. ShanonoKey replaces that physical device with your smartphone, giving you the same level of protection with none of the inconvenience.

Who is ShanonoKey For? ShanonoKey is built for business banking customers who require an additional layer of security beyond a username and password. It is particularly suited to finance officers and treasurers who authorise payments on behalf of their organisation, operations teams that need a reliable always-available token without managing physical devices, and any customer that requires two-factor authentication for internet banking operations.

Key Features Device Binding ShanonoKey is locked to your specific device during a one-time activation. If you change your phone, you simply activate ShanonoKey on your new device and the old one is automatically invalidated. Even if someone knows your internet banking password, they cannot approve transactions without physical access to your registered phone.

One-Time Password Generation ShanonoKey generates a fresh six-digit code every 30 seconds. A circular countdown timer shows exactly how many seconds remain before the current code expires. A single tap copies the code to your clipboard so you can paste it directly into your web banking platform without risk of mistyping.

Biometric Authentication Before generating any token, ShanonoKey requires Face ID, fingerprint, or your device's biometric method. This ensures that even if someone picks up your unlocked phone, they cannot generate a valid OTP without your biometric approval.

Backup PIN If biometrics are unavailable, ShanonoKey allows a four-digit backup PIN set during activation — keeping your token generation protected behind a personal access code at all times.

Works Offline Once activated, ShanonoKey requires no internet connection to generate codes. This is particularly valuable in environments with poor connectivity where you still need to authorise transactions without delay.

Getting Started Activation takes less than five minutes and only needs to be done once. Open the app, confirm your account eligibility, verify your identity with a one-time SMS code sent to your registered number, and your device is ready. From that point, open ShanonoKey, pass the biometric check, and your code is ready to use.