Secure file transfer and public PGP key
To ensure a high level of security for our customers and vendors, we have strict requirements for technical encryption in file communication.
Please note the following:
- New public keys will be published on this page before they take effect.
- Update your keys before the stated deadline.
- Remove expired keys from your system once they are no longer valid.
Handelsbanken acting as SFTP server
In order to use SFTP vis-a-vis Handelsbanken (i.e. when we act as an SFTP server) you will need to download our SSH public host key. This key will make it possible for your software to ensure that you communicate with the correct server, and avoid so-called man-in-the-middle attacks.
The SSH host key must be installed in your SFTP software. Please refer to your documentation or supplier for details. The key you download from us is safe, i.e. it need not be kept a secret.
Fingerprints
We have two different keys, each with a different fingerprint. Fingerprints are short texts, calculated mathematically, which ensure that the key is correct, and come in two flavours per key.
Preferred key
Our preferred key is ED25519, a modern algorithm. Size: 256 bit
The key is valid from 9 November, 2021.
ED25519 (txt) Fingerprints ED25519 (txt)Secondary choice
The secondary choice, RSA, is equally secure as ED25519, but uses different mathematical principles. The key is valid from 9 November, 2021.
RSA (size 4096 bit) (txt) Fingerprints RSA (txt)Please note that due to the different algorithms being used, an RSA key of 4096 bit is roughly equivalent to ED25519 256 bit.
Handelsbanken acting as SFTP client
Current public keys
The following public key is used for authentication purposes when Handelsbanken connect to external parties SFTP servers. This key follow the same private/public asymmetric cryptographic method as the host/server key, but for a different purpose: that of proving Handelsbankens identity.
This is our public client key, the key comes in two flavours: Our keys are RSA 2048, a modern algorithm.
Open SSH
Open SSH (txt) Fingerprint Open SSH (txt)RFC 4716
RFC 4716 (txt) Fingerprint RFC 4716 (txt)Protecting your files with PGP
PGP agreement
To be able to use PGP with Handelsbanken, you are required to sign a PGP agreement. Please contact your local branch office to receive the necessary documents.
Exchange of PGP keys
You will also need to exchange public PGP keys with Handelsbanken.
Change of current key
Handelsbanken will make the next key available on this webpage well in advance of the current key expiration date. We will also announce the exact date here when Handelsbanken will start using the new key for outbound traffic from the Bank to you. Make sure to add our new key to your key ring before this date in order to avoid any problems.
Current public PGP key
The current key 7 is valid until 30 May 2030.
Contact us for more information
For questions regarding the signing of a PGP agreement, products, communication methods or other banking-related questions, please reach out to your primary contact at the Bank.
Do you have any questions relating to secure file transfer or regarding the key exchange, please contact us at Corporate File Services. We are happy to guide you if you need our help.
