Multi-Factor Authentication for Online Access Home Banking
Self-Study Training Guide
In the coming months we are adding a new layer of security called “Passmark” to Online Access Home banking. This security will help protect our members against phishing and web site spoofing attacks, and provide them with more peace of mind when they access their accounts online.
The security upgrade will change the way our members login to their account. We are beginning to communicate these changes now in preparation for the live date, which we have tentatively set for *
Here’s how the login process will change:
You will complete a simple, one-time enrollment process the first time you log into Online Access after the security upgrade.
1. You’ll select a “PassMark,” or picture, from an online library of images; the image will be displayed to you on future Online Access logins. The image is known only to you and the credit union.
2. You’ll enter a “PassPhrase,” or text phrase, that will be displayed along with your image when you login. The text phrase in known only to you and the credit union.
IMPORTANT PassPhrases are not passwords. The PassPhrase will be displayed under the passmark (picture). The idea being when you enter your account number, the next thing you see is the passmark and pass phrase. If they are not there, a security breach of some sort has occurred and you should NOT proceed.
3. You’ll select three “challenge questions” and provide the answers to the questions.
Logging into Online Access:
After enrollment, when you log into the Online Access you’ll enter your User ID. Then, we’ll show you the picture and text phrase you selected. If the image and phrase shown to you are correct, you’ll continue with the login and enter your password. This is your assurance that you are logging into the legitimate FLCU home banking web site, since no one else knows your image and text phrase – only you and us.
Challenge questions will only be displayed if you log into Online Access from a different computer than you used when you enrolled. If we don’t recognize the computer, we will double check that it is really you. This is another layer of security designed to protect your account from unauthorized access if your account information is stolen, and help us identify you when you are logging into Online Access from an unknown computer. You’ll have the opportunity to “register” computers you regularly use to access you online account. Once you successfully answer the question, we’ll show you your picture and phrase.