Frequently Asked Questions about Enhanced Security Standards

Begining November 6, 2012 the Federal Government will make it manditory for you to make some changes to your current Home Banking Log-In. 

How do I make this change before the mandatory date of November 6, 2012?

Creating a new User Name is easy. Click on “User Options” in the upper right hand corner within Home Banking. Click on “Change User Name” then create a new User Name that is different from your Account Number and is 6 to 32 characters in length. It must contain a letter and it can contain a number or special characters.

Why are you changing the security standards?

We care deeply about keeping your money safe while providing you with easy access to your accounts. With the continued growth of online banking, there are increased needs for greater security standards to keep you and your money well protected. In addition, the government issued new guidelines in 2011 calling for enhanced security measures for online banking. As a result we are upgrading our security procedures to provide you with the best protection available. Our new security standards will make it even safer for you to monitor and manage your money while safeguarding against unauthorized access to your accounts.

What are the changes?

There is one key change that you will need to complete now:

1. We will ensure that your login is as strong as it can be. User Name must be six characters long and they can’t be made up of only numbers (e.g. alphabetic or alphanumeric). They can be made up of a combination of letters, numbers and the following special characters: @$*_-=.!~. If your current login does not meet these upgraded minimum requirements you will be prompted to create a new user name. If you currently use your account number you will need to create a new user name.

Once the upgrade is complete for all users there will be one final step for you to take:

2. We are also implementing a new requirement to verify your identity by phone or email when you log in. After providing your username and password, you will be asked to provide a phone number for a phone that you have with you or an email address that you have immediate access to. We will immediately send an access code to your phone (via voice or via SMS text message) or email that you will enter into your computer to complete your login. You can opt to have this computer remembered so you do not need to repeat this step each time you log in. You must obtain a new access code for each computer or mobile device you use to log in that is not remembered on the system. How will using my phone or email make my account safer?

We are implementing what is known as “multifactor authentication.” This makes it more difficult for phishers and attackers to access your accounts without you knowing it. While this might seem unfamiliar, you actually use it every time you visit an ATM. When you access your account from any ATM, you need both your ATM card (something that you have) and PIN (something that you know).

We’re implementing the same type of protection by using both your password and your phone or email to access your account. By doing this, even if an attacker or a phisher manages to steal your password and tries to use it to log in, they would be unsuccessful because they would need your phone as well.

Is there anything I need to do?

If you do not complete the update before the security upgrade goes live you will be asked to update this information upon future login. At that time you also must have your phone or access to email handy and provide the phone number or email to receive your access code. You will need this phone or email every time that you need to receive an access code.

Will I always need to use both my password and my phone or email from now on?

The first time you attempt to log in from a new computer you will need to use both your password and the access code you receive on your phone or via email in order to log in. If you are accessing from a private computer that you personally use, you can opt for the system to remember your computer for future logins. (See the screen example below.)

By doing this you will not need to repeat the step of obtaining an access code via phone or email. You will only need your username and password in the future to log in.

For the best security protection we suggest that you always use both your phone or email and your password. If you do opt to have your computer remembered we recommend that you do so only on computers that you personally own and that have the latest updates and virus protection software installed.

How about if I log in from another computer or mobile device?

The first time you log in from another computer or mobile device you will need to use both your password and a new access code to log in. You can choose to have your new computer/mobile device remembered on the system so you only need your username and password for future access to your account online.