Your online security has always been a top priority. Soon, we’ll be upgrading your online banking experience with enhanced login security known in the online security industry as Multifactor Authentication to further help protect you from identity theft. At KeyPoint Credit Union we refer to this as Enhanced Login Security.
What is Enhanced Login Security?
Enhanced Login Security is superior security technology that protects your accounts from unauthorized access by strengthening the security of your online banking account. When you login to your internet banking account you can have peace of mind. Powered by the best-of breed technology, Login Security protects against online fraud by providing an additional authentication ‘factor’ beyond your username and password used today through the use of a one-time security access code.
Login Security will:
- Defend against identity theft and fraud
- Provide added security from any computer, wherever you are
- Provide a quick and easy one-time set up process
Top of Page
When will I know that Enhanced Login Security is set for my accounts?
Starting April 02, 2012 you will be presented with the Enhanced Login Security screen to set up extra login security when you access your online banking account. You can set up how you want to receive a one-time security access code from the options that are available to you, and then you're all set. You can receive this one-time security access code by:
- Voice Call
- Text message
- Email
Top of Page
How will it affect my online banking experience?
Starting April 02, 2012, you will be presented with the following steps to retrieve the one time security access code to access your online banking account:
- From the Business Online Banking login page, enter the Company ID, User ID, User Password, then click “Submit.” Note: The User Password prompted is the old Company Password you used previously to login.
- The Enhanced Login Security screen will appear allowing you to select one of the delivery destination(s) to retrieve the Security Access Code via email or Voice Call. Note: This code does not replace your regular password. It will expire with your session timeout or in 30 minutes.
- Retrieve Security Access via Email – Click on the email address link then login to your email account to retrieve the 6 digits access code. Note: Please check your inbox or SPAM folder for the Security Access Code email notification. Depending on the settings of the email account, the notification email may be forwarded to your SPAM folder.
Retrieve Security Access via Voice Call– You will receive a voice call to the phone number listed under Step 1 of the Enhanced Login Security screen once you click on the phone number link. You will then be prompted to press “#” after answering the phone in order to receive the 6 digits access code. The code thus cannot be left on voicemail. Generally, the call display is “unknown caller” or “unknown.” Users that have “blocked call” functionality enabled on their phone may not receive the voice call.
Retrieve Security Access via Text Message – This option is available for mobile phone users only and will not be available until you activate text message by selecting Admin > Login Credentials > Enhanced Login Security once you are logged in to your business online banking account. End users must check mark the checkbox to accept the full Terms and Conditions prior to enabling the text message option. Once this option is activated, you can click on the phone number listed on the number listed under Step 1 of the Enhanced Login Security screen and a text message containing the 6 digits access code will be sent to your mobile phone.
- Enter the Security Access Code in the text box under Step 3 and click Continue.
- You will be prompted with the Enhanced Login Security Challenge screen. If you check mark the checkbox to enroll your computer for future use, you will bypass Enhanced Login Security the next time you login from the same computer. Note: Once logged in, you can select Admin > Login Credentials > Enhanced Login Security to enroll or unenroll your computer for Enhanced Login Security at any time.
Top of Page
How will it affect other users I granted access to my business online banking account?
As a company administrator you are required to add the phone number(s) to the profile of all users you added to your business online banking account. This will allow them to retrieve the one-time security access code via voice call. Once the voice call option is enabled on their profile, they can activate the text message option by following the steps outlined in number 2 above.
Top of Page
Can I access my account from other computers at my home, my office or on the road?
Login Security identifies you as the true “owner” of your accounts by recognizing not only your password but your computer as well. If we don’t recognize your computer – you’ve logged in from a public computer or one you haven’t used before, for example – we’ll ask you to select how you want to receive a unique one-time access code. You can receive this one-time access code by:
- Phone
- Text message
- Email
You will then be asked to enter that code as an additional line of defense to prevent unauthorized access. With Login Security, you’ll be protected from whatever computer you're using, whether you're at home or on the go.
Top of Page
What is a security access code?
A security access code is a temporary code provided by the system that is unique to you and is used in the process to authenticate your identity.
Top of Page
When will I receive a security access code?
You will receive a security access code by clicking one of the delivery destination(s) to request a new security access code when it is presented during the Enhanced Login Security process.
Top of Page
What is a Bad/Failed Login?
A ‘Bad Login’ occurs whenever an invalid credential is presented during the business banking login process. When the Bad Login count threshold of 5 is reached, the user is locked out of the system. A company administrator or KeyPoint administrator must unlock or reset the user’s account before they can access the system again.
If one of the following invalid login events occurs, the bad login count will increment by one for each instance:
- Incorrect user password
- Security Access Code expired
- Security Access Code incorrect
- Computer is not recognized – No cookie or invalid cookie installed
Top of Page
Will my security code expire?
Yes. Your security access code will expire if your session times out or within 30 minutes, whichever is first. The expired security access code entry will count as a bad login attempt.
Top of Page
Can I reuse a security code?
No. Each security access code is unique and valid for a single use only. If a security access code has been used previously, a new security access code must be generated and entered to gain access the system.
Top of Page
How does Enhanced Login Security work?
The system will give you the opportunity to enroll each computer that you use for online banking. Once you have added the extra login security to your computer, you will see no difference to the login functionality. However, if you login from a different computer than the one you have enrolled, you will be presented with the challenge in order to login.
We recommend that you only enroll computer browsers that are secure and can only be accessed by authorized individuals. For example: you would not want to enroll a computer browser that was located within a public area, or used by many people. Please note that if you use multiple browsers within the same computer you will need to enroll each browser separately.
Top of Page
What does it mean to enroll my computer?
When you enroll your computer for this service, you will allow the system to place a code, called a cookie, on your computer. The cookie contains a unique identifier that is used in combination with your login identification. At every subsequent login attempt after enrollment, the system will look for this cookie and validate that it matches the login identification that you entered. This cookie is used by the system only to validate your computer's identity and does not contain any personal information.
Top of Page
Must I enroll a computer I do not use regularly?
No. However you must enter the security access code sent to your delivery destination(s) we have on file in order to be authenticated and allowed access to the system. Do not enroll public computers when the system presents the opportunity.
Top of Page
What should I do if I want to unenroll a computer that I have previously enrolled?
If you discontinue using a specific computer to access the system, we suggest that you unenroll that computer from this service. This can be done by logging into your account from the computer that you want to unenroll and selecting the "unenroll this computer" option from Admin > Login Credentials > Enhanced Login Security screen. This will remove the secure cookie from that browser. If an attempt is made to login to the system with the unenrolled computer, a challenge will be presented before access is granted.
Top of Page
Can I unenroll a computer from a different computer?
Yes, however you will have to unenroll all of your computers. This can be done by selecting the "unenroll all computers" option from Admin > Login Credentials > Enhanced Login Security screen once you are logged in to your online banking account.
Top of Page
Can I login from multiple computers and browsers?
Yes. You can login from as many different computers and browsers as you like. However, if you login from a computer that the system does not recognize, you will be presented with the Enhanced Login Security screen and will be given the opportunity to enroll that computer.
Note: If you use multiple browsers on the same computer you will need to enroll each browser separately.
Top of Page
Why do I keep getting challenged when I login from a computer browser that I have already enrolled?
This is probably happening because the cookie that we placed within your browser is being deleted. We recommend that you do not delete these cookies if you do not want to be challenged at each login.
Top of Page
I share my computer with someone that also uses business banking. Can both of us still login from the same computer browser?
Yes. You can use the same computer to login since the "cookies" placed on the computer are specific to each user ID.
For more information on Enhanced Login Security please contact a KeyPoint Business Services representative at (408) 731-4123 Monday - Friday, 9:00 am - 6:00 pm PST.
Top of Page