Security Enhancement Changes

How You Log In to CU@Home

What is it?

We are implementing a security feature known as Multi-Factor Authentication, or MFA. In simple terms, it means that logging in to our online banking system will be even more secure.

Why are you doing it?

Identity theft attempts are becoming more common and more creative. For example, you might receive an email from someone claiming to be the Credit Union and asking you to verify your account information and/or password. You click a link in the email and it takes you to a site that looks exactly like ours, but it’s not. Someone has created a fraudulent “mirror” site and as soon as you enter your personal information like your login ID and password, they’ve got the information they need to log into and access your real account. This is called phishing.

In an effort to protect consumers against scams like this, service organizations have designed security features that financial institutions can use. MFA is one of these security tools. Not only is it a great idea, a recently established federal regulation is now requiring that financial institutions utilize MFA to better protect the privacy and security of personal information. This requirement is mandatory and affects all banks, credit unions and other financial institutions offering account access over the Internet.

When will it happen?

We’ll gradually roll out MFA mid-month in January 2007. By the end of the month, all members will be required to go through the set-up process prior to logging in to CU@Home, our home banking site.

What will be different?

We’ll identify you not only through your existing password, but also by the computer you’re using to log in. When you go through the MFA set-up process, we’ll automatically take note of the computer you’re using and consider it registered. If you later try to log in from a computer that has not been registered (a public computer or a computer you haven’t used before), we’ll ask you some challenge questions that only you should be able to answer to make sure it truly is you trying to log in.

You’ll have the option of having us recognize additional computers as registered computers. If you’re using a public computer, you will always want to forego that option.

What is the set-up process and how long will it take?

You’ll be asked to:

• Select an image from our image library and then tell us what you want to call the image. This image and phrase will then be displayed to you every time you visit the CU@Home log-in page. If you’re using a registered computer and don’t see the image and phrase you selected, it will be your signal that you are on a fraudulent site and you shouldn’t enter your password. Instead, you should call us immediately.

 

• Answer three security confirmation questions, known as challenge questions. (You’ll have a list of pre-selected questions to choose from and they will include personal things that should not be readily available to anyone else, such as the name of your first pet.) We’ll keep the answers to these questions to be able to verify your identity in the event you’re using a different computer, or if you’ve cleared your browser of cookies.

The entire process should take less than five minutes to complete, and it only needs to be done once.

Will I be able to use the same image and phrase that I set up for online Visa access?

Unfortunately, the images that are presented upon registration are selected at random. With over 30,000 images available, it is highly unlikely that you would find the exact image. You may, however, be presented with an image that closely resembles what you selected for the online Visa access. The phrase is free form, so you can always enter the same phrase.

Can I opt out?

Since the Federal Financial Institutions Examination Council is requiring all United States financial institutions to implement additional authentication for online banking, you will not be able to opt out.

However, prior to February 1, 2007, you will have a one-time opportunity to delay the set-up process until the next time you log in.

If you still have questions…

As always, we're available to you during regular business hours.  It really is a simple procedure, and we’d be happy to walk you through it.