Security Upgrade FAQs

Transcription

1 EMFA FAQs Security Upgrade FAQs Your online security is important to us. Soon, we ll be upgrading your online banking experience to include a new security service, which is known in the online security industry as Enhanced Multifactor Authentication, to further help protect you from identity theft. At Horizon Credit Union we refer to this as Enhanced Multifactor Authentication (EMFA). What is Multifactor Authentication? Authentication is the process used to allow access to only the correct customer. Without effective authentication controls, it is possible for fraudulent users to access your account. We authenticate customers by issuing challenges that only the true customer should be able to pass. Multifactor Authentication means two or more different types, or factors of authentication must be passed. By using two different factors of authentication, we get a higher assurance that the customer is the correct intended user. MFA is commonly used to protect transactions at ATMs, where your card is something you have, and your PIN code is something you know. Similarly with EMFA, your phone is something you have, and your password is something you know. For convenience, after you successfully authenticate with your password and One- Time Passcode (OTP), you may enroll your computer for use in authentication. If you choose to enroll your computer, a special Browser Cookie will be present on the system, which will act in place of your phone for something you have in your possession. What information will be required? You will be prompted for your password. In addition you will be required to provide information that enables us to send you an OTP. We recommend that you enroll your personal mobile phone. Enrolling a phone number that is shared with others is not recommended. When will I know that Enhanced Multifactor Authentication is set for my accounts? Soon you will be prompted to sign up when you login to your online banking session. Follow the instructions to enroll your computer by providing the information requested. What about mobile banking? Mobile banking will continue to use challenge questions to confirm your identity. How will it affect my online banking experience? Instead of answering a Challenge Question, you will receive an OTP at the number you enroll. Optionally, you may then enroll your computer to act in place of your phone. Once you enroll your computer, the rest of your online banking experience will remain exactly the same.

2 EMFA FAQs Can I access my accounts from other computers at my home, my office or on the road? Yes, you can access your accounts from any computer. However, when you authenticate from a system that does not have the special Browser Cookie, you will need to authenticate using the Phone OTP instead. You may enroll multiple computers, but be mindful not to enroll a computer that you don t often use, or that is shared with people you do not know. Enrolling a non-trusted computer is equivalent to lending your ATM card to a stranger. For more information on Enhanced Multifactor Authentication please contact today.

3 EMFA Screen Shots We are pleased to bring you our upgraded security service. Soon, we ll be upgrading your online banking experience to include this new security service, which is known in the online security industry as Enhanced Multifactor Authentication, to further help protect you from identity theft. The screen shot examples provide an at-a-glance view of the system after the upgrade. A key is provided for a quick reference to important information on each screen image. Delivery Options Setup Screen Mandatory Multifactor Authentication and Forgotten Password Setup When logging into Internet Banking for the first time, you will be presented with the Login Security Setup screen where you must set up one or more challenge question(s). You also have the option to set up phone numbers for text and/or voice call, and/or an address for one-time passcode retrieval. Note: Since you are automatically enrolled in the forgotten password feature, you will not see a forgotten password section on the setup screen. Challenge Screen

4 When you log in from a computer that you have indicated as Public, you will be challenged to enter a one-time passcode or answer Challenge Questions. If you are on your mobile device, you must use Challenge Questions. On a computer, it s most secure to select a one-time passcode delivery option. Step 1: Select your delivery option, then go to that device to retrieve the one-time passcode. Optionally you may authenticate with Challenge Questions. Note: Challenge questions are mandatory when using a mobile device If your Financial Institution generated a One-Time Passcode for you while on the phone with them, you will click the link toward the bottom ("click here to enter your access code") to enter it. Step 2: Depending on the delivery option you selected, the popup where you entered the code will look different. The four options are displayed below. creenshots seem really small 1 2 Note: The one-time passcode expires 15 minutes after the system sends it. You can click on the "I need it to be sent again link" to receive the same passcode. The passcode expires when either: 1) you use it to log in or 2) 15 minutes has elapsed. 3 Key 1 Challenge question 2 Text Message 3 Voice

5 Forgotten Password Reset If you forget your Internet Banking password, your financial institution makes it easy to reset it. This is the same process as you experience today; however, the way you retrieve your one-time passcode will change. To begin, click the Forgotten Password link on the login screen. Step 1: Enter your User ID (this step won t change). Step 2: Just as with the new Challenge Screen, you ll select your delivery option (see screenshot below), retrieve your code and enter it on the popup, or enter your answers. This screen allows you to reset your own password without having to call your Financial Institution. The same delivery options you selected to receive your One-time Passcode apply to how you will you use Forgotten Password. Step 3: Change your password on the final screen (this step won t change).