Q: What is Multifactor Authentication?
A: Multifactor Authentication is a procedural safeguard that creates an online identity for you through a series of questions, choices of display images and phases, and technology that is able to identify you by the computer(s) that you use.
 

Q: Why is this additional security required?
A: The fastest growing types of internet fraud over the past year have been “phishing” and “pharming” attacks aimed at online banking and other secure online logins. Phishing is when e-mails are sent that point customers to a bogus site that resembles a true secure website, prompting the user to enter his/her confidential information; pharming is redirecting internet traffic to other “spoof” sites to obtain a customer’s personal data.

In response to these threats, the Federal Financial Institutions Examination Council (FFIEC) established guidelines that all banks must follow. Among these requirements are the additional security features that have been implemented here.
 

Q: Who is affected by the addition of Multifactor Authentication?
A: All online banking users are required to provide more that just an Access ID and Password to access the online banking system. Users will also be required to establish a display image and pass phrase, as well as the opportunity to register his/her PC as a trusted access point for future logins. If the user is not using a registered computer, access can still be established by answering one of three challenge questions chosen upon initial set-up.

Business online banking users who initiate wire transfers, tax payments and ACH entries through the online banking system will be required to enter a one-time password generated by an electronic device called a “Token” to initiate these transfers. Tokens are provided by the bank.
 

Q: How does an image and a pass phrase protect me?
A: By displaying a unique image and pass phrase known only to the user, he/she is assured that they are visiting the correct website for access to the online banking system.
 

Q: How does registering my computer work? How many PCs can I register?
A: Every computer has a distinct “fingerprint” (including system settings, operating system, registry settings, etc.) that makes it unique. When registering a PC, the online banking system remembers the computer and will allow access only via those PCs that it recognizes as belonging to the user. Users can register as many computers as they wish, though it is recommended against registering “public” PCs, such as those in libraries, schools, etc.
 

Q: What if I use a computer that isn’t registered?
A: If the online banking system doesn’t recognize your computer as registered to you, access is still permitted only after correctly answering one of the three security challenge questions that were selected upon initial set-up.
 

Q: How do I change my Image? Pass Phrase? Security Questions/Answers?
A: You can change your image by selecting “Change Security Data” under the Options tab after logging in to the online banking system.