SSL Flaw Exposed: Is Your Net Banking Safe?

A major Indian digital security company is shutting its SSL certificate business after a researcher found weak encryption keys. This affects how safe your online banking and UPI logins actually are — here's what you need to know.

Here's what happened: A security researcher discovered that private encryption keys in 8 of eMudhra's intermediate Certificate Authority certificates were weak enough to be mathematically recovered — exposing the sessions they were meant to protect.. Google and Mozilla's root browser programmes responded by revoking trust in eMudhra's certificates, meaning Chrome and Firefox will flag websites using them as insecure — affecting any Indian site that bought SSL protection from eMudhra.. eMudhra has announced it will voluntarily wind down its global SSL/TLS certificate business following the incident, making it one of the few Indian Certificate Authorities to exit this space under regulatory and browser pressure..

What you should do: Check for browser warnings: if any banking or payment site shows a 'Not Secure' or 'Your connection is not private' message, close the tab immediately and access your account only through the bank's official app.. Avoid public Wi-Fi for all money transactions — net banking, UPI, credit card payments — regardless of the padlock icon, because certificate vulnerabilities are most dangerous on shared networks where traffic can be intercepted.. Enable two-factor authentication (2FA) on every financial account you hold: even if an SSL certificate is compromised, a one-time password sent to your registered mobile stops an attacker from completing a transaction..

Pro tip: Always type your bank's URL directly or use bookmarks — phishing sites exploit SSL confusion by getting cheap certificates from other providers to show a fake padlock on a fraudulent page.

For readers weighing their credit and loan options, our personal loan guide and CIBIL score resources put this update in context.