French banks don’t use TAN codes? Isn’t it an EU directive at this point?
It doesn’t have have to be a dedicated hardware token or a chip TAN, mTAN or soft tokens are also acceptable.
Not French, but German here. TANs are obviously used for transactions, but I've never seen them used for login purposes. To add insult to injury, the _only_ permissible password length for my bank was 5 (five!) characters.
Unless a 6-digit "password" that you choose and stays the same for as long as you wish counts as a soft token, no they don't. Well, most don't, although some do.
I don't actually know what are the TAN codes you are talking about, I guess, if they're some technical implementation detail I sure don't know about it.
For a SEPA transfer, you input the code of the account you want to transfer money to, then the amount and various optional messages and transactions codes if you want, then click "submit" and it's done.
For me in the UK to move money I need to generate a TAN using a SecureID token the TAN is generated by using the secret in the token and digits of the account number I need to transfer money too.
The same SecureID also generates OTP for 2FA login.
But there are other TAN schemes including pregenerated lists and TANs sent over SMS or TANs which are generated by using the smartcard in your debit card.
Most French banks don't do that, for example.