Multifactor Authentication - Enhanced Login Security

Click here for User Instructions and what to expect when Enhanced Login Security is enabled.

Overview

Multifactor Authentication strengthens security at login while providing peace of mind for retail and commercial online banking users. Powered by TriCipher, Multifactor Authentication protects against online fraud by providing an additional end user authentication ‘factor’ beyond the username and password used today. The solution was designed to preserve the convenience and usability of your online banking channel.

Features

• Browser-based secure cookie with an individualized credential (ID) stored on the user’s computer as a second factor in addition to user name and password.
• End users enroll each computer on which they plan to conduct online banking activities.
• Prevents unauthorized access using stolen credentials on a non-enrolled computer.
• Users can authenticate temporarily on a computer they do not wish to enroll, using either challenge questions or temporary password.
• Users can un-enroll PC’s they no longer wish to use for online banking activities.

End User Benefits

• Provides peace of mind regarding online banking authentication
• Easy for users – once enrolled, there is little difference in the login process
• Usable anywhere at any time – users can enroll any number of computers

Financial Institution Benefits:

• Conforms with FFIEC guidance for stronger authentication
• No hardware tokens to manage
• Robust protection against unauthorized access, even with stolen password credentials
• Credentials that have been reported stolen cannot be used to log on
• Limits your exposure to fraud
• Protects Against:
  • Phishing, pharming attacks
  • Dictionary attacks
  • Keystroke logging viruses
  • Use after reported loss

COMMON USER QUESTIONS

Question: After Multi-Factor Authentication (MFA) is enabled by my bank for Enhanced Login Security, what should I expect to happen when I try to login to Internet Banking if I am an existing Internet Banking user?

Answer: After MFA is enabled by the bank, the first time you log into Internet Banking from an unenrolled computer the user will be prompted to choose a Challenge Question and Answer, in addition to the opportunity to enroll the computer into MFA. Once a computer is enrolled the user will not be prompted to answer the challenge question again when accessing Internet Banking from the same computer. If the user chooses not to enroll the computer, they will be required to answer the Challenge question each time they access Internet Banking. (See Temporary Access Information)

Question: I’m trying to get into my Internet Banking account and there’s this screen asking for an answer to a challenge question.  Why?

Answer: “Are you at a different computer than you usually use?”

If yes, then refer to the Temporary Access Information at the end of this document.

Answer: Are you using a different browser than you usually use? (Internet Explorer, Mozilla, Netscape)

If yes, then refer to the Temporary Access Information at the end of this document.

Answer: Have you recently deleted all your cookies?

If yes, you have also deleted the cookie that our security feature uses to recognize you. Please refer to the Temporary Access Information at the end of this document and re-enroll your computer.

Question: I often use a computer at the library to check my online banking account. Should I go ahead and enroll that computer so I don't have to answer the challenge question each time?

Answer: We recommend that you do not enroll a public computer. It is better to continue to answer the challenge question.

Question: I've gotten into my Internet Banking account from another computer and it is not asking me for my challenge question as I expected. Why?

Answer: Have we reset your password since the last time you logged in? Also, having the bank reset your password also unenrolls you from the security feature. You will need to re-enroll this computer. Please contact the bank for assistance.

Question: I'm at a friend's house and trying to get into my Internet Banking account, and it is asking me for an answer to my challenge question. But, I can't remember it! How do I get into Internet Banking now?

Answer: Contact your bank and they can assist you with signing onto your account.

Question: I'm at a friend's house and trying to get into my Internet Banking account, and it is asking me for an answer to my challenge question. I set up a question and answer for Forgotten Password, but I haven't forgotten my password. What should I enter here?

Answer: The question and answer you set up for Forgotten Password is the same one you set up for the login security feature. Simply re-enter your answer and you'll be taken to Internet Banking.

TIPS FOR USING MULTI-FACTOR AUTHENTICATION

• Users can enroll as many computers and browsers as they wish
• Once a user enrolls their first computer, they user is now enrolled in the MFA feature.
• Once a computer/browser is enrolled, the user will see nothing different at future logins to Internet Banking from that computer, using that browser unless they clear their cache and cookies. Note: This will un-enroll the computer and they will need to re-enroll this computer.
• If a user unenrolls their computer and attempts to login into Internet Banking they will be prompted to answer their challenge question because unenrolling the computer does not unenroll the user. (See Temporary Access Information).
• A user should only unenroll a computer if they are not going to be using this computer for Internet Banking again.

TEMPORARY ACCESS - CHALLENGE QUESTION

Step 1: Enrolled user logs into Internet Banking from an unenrolled computer or browser.

Step 2: System displays a screen with user's challenge question(s).

Step 3: User enters the answer(s) and is taken to Internet Banking.

TIPS FOR TEMPORARY ACCESS

• A user will only be challenged if they are an enrolled user, but are using an unenrolled computer (at the library, at work, at a friend/relative's house, etc.)
• If a user wants to enroll an additional computer, they will have to:
  • Go through the challenge screen on that computer
  • Then after they enter Internet Banking will need to go to User Options
  • Then choose: Enhanced Login Security to enroll the computer.
• The same questions and answers are used for both the Challenge Question and Forgotten Password features.
• Users are required to set up challenge questions and answers the first time they log in after your bank enables Multifactor Authentication (MFA).