The Swedish Data Inspectorate (DI) has told three of the country’s biggest banks -- Svenska Handelsbanken, Nordea Bank, and Danske Bank -- that the security of their mobile banking apps is too weak and must be overhauled. Currently, the apps require only a user name and password to authenticate a customer. Authentication requirements have been a longstanding issue for online banking, with regulators pushing for stricter controls but generally leaving the specifics up to financial institutions. As bank customers increasingly do their transactions from mobile devices, banks must adapt and supplement their existing authentication methods to fit new technology and new threats. To keep regulators off their back, they’ll need to be more forward-thinking than their Swedish competitors.