PassMark

PassMark^TM is a new service that offers you added safety by helping ensure that only you can access your credit union account. 

 

What is this new security feature?

Users of Security First have always authenticated themselves to gain access. From now on, Security First will reciprocate and will also authenticate itself to you.

You will know with every certainty that you are visiting Security First because you will be presented a graphic and phrase each time you log in.

 

 

Where is the text box for my password?

You will enter your Security First password on a subsequent page. Please enter your account number, click “Log In,” and you will quickly go to the next screen.

If this is your first time logging on since we added this feature, you will be asked to select a “challenge question” and provide us with a short answer. This question will only be asked of you if you access Security First from a different computer (or if you delete your browser’s cookies).

 

 

Has my Security First password changed?

No. The answer you provide to the “challenge question” is separate from your regular Security First log in password.

 

 

Why did SECURITY First introduce this feature?

Security First has never been successfully hacked, and no membership has been phished. But, phishing is the fastest growing crime in the country. To ensure we proactively keep our members safe and secure, Security First has implemented this new security feature.

 

 

Why do I need PassMark?

In the technology age we live in, fraudsters attempt to trick people into revealing their personal information such as passwords by creating fake websites that look very much like the sites of legitimate financial institutions. This phenomenon has been called Phishing.

PassMarks^TM offer a simple countermeasure to these attacks, as well as protection against other forms of identity fraud.

 

 

 

Why do I only have a BillPayer and Help button after logging on?

 

If after logging in successfully you do not see all the menu buttons, errant cookies, saved passwords and cached pages can be the cause. The remedy is to clear browser cache, cookies and in some cases saved passwords.

·    In Microsoft Internet Explorer (for Windows) the clear cookies and delete files (cache) options can be found in "Internet Options" within the "Tools" drop down menu.

·    In Microsoft Internet Explorer (for MAC) the clear cookies and delete files (cache) options can be found in "Preferences" within the "Explorer" drop down menu.

·    In Netscape and older versions of Mozilla (for Windows) the clear cookies, cache and saved passwords options can be found in "Preferences" within the "Edit" drop down menu.

·    In Netscape and FireFox (for MAC) the clear cookies, cache and saved passwords options can be found in "Preferences" within the "Netscape" or "FireFox" drop down menu respectively.

·    In Mozilla FireFox the clear cookies, cache and saved passwords options can be found in "Options" within the "Tools" drop down menu.

NOTE: For Mozilla FireFox if Save Passwords is turned on and there are Saved Passwords for "Security1stfcu.com" please remove these saved passwords. Then when prompted during each part of the Security 1st log in authentication process select "Never for this site" button.

·    In Safari the clear cookies option can be found in "Preferences" within the "Safari" drop down menu.

How it works.

You and the credit union share a unique picture and a text phrase (called PassMark) that no one else knows. In addition, we take a footprint of your computer. When you log in, look for the picture to verify that it is really us. If we recognize your computer, we will show you the picture, and you can enter your password to get in. If you don’t see the picture, double check to make sure it’s really us (by manually entering the credit union’s URL into your browser to go to our web site). If we don’t recognize your computer, we will double-check it is really you. We will ask you a question to which only you would know the answer before showing you the picture and asking for your password.

 

A More Detailed Explanation

The PassMark system utilizes two primary elements for authentication:

1. PassMark A PassMark is a small image (and a text phrase), known only by the credit union’s site and you. When the site communicates with you, it displays your PassMark to authenticate itself to you. Since only the real site knows your unique PassMark, a fake site cannot display it.

2. Device ID A device ID is a set of identifying data, including secure cookies and other forms of data, which are used to identify a specific computer. Because device ID’s can be accessed only by sites within the domain that originated them, fake sites cannot access a device ID.

These and other elements are combined to create an authentication system in the following way:

·    You are assigned a unique PassMark (which you can change just like you can change a password). When signing on to the credit union’s site, you look for your PassMark before entering your password.

This assures you that it is the real credit union site.

·    Before your PassMark is displayed, the credit union site checks that the device ID of your computer is registered to you.

This protects against a fraudster trying to get your PassMark from the credit union site.

·    The credit union site also confirms that the device ID is registered to you before allowing you to sign onto the site, even with the correct password.

This protects against an attacker with a stolen password (obtained by phishing or by other means), because the attacker does not have access to your computer.

·    When you want to register a new computer with the credit union site, the site will prompt you with a challenge question to which only you know the answer. If you provide a valid answer, you are shown the Passmark-password exchange. The site registers the computer using a device ID upon successful log in.

This provides two-factor authentication of you in the case where a previously-registered device ID is not available.

This achieves a very significant increase in security versus password authentication: (a) You now have a simple method to authenticate the credit union’s Web site. (b) The credit union now has lightweight two-factor authentication for every Web-based transaction.

Simple For you

Above all, PassMarks are simple. Increased security is achieved without much change in your experience. Just use the site as usual and look for your PassMark at log in. Occasionally you might be asked to re-validate who you are or to register a new computer.

Changing Your Passmark

The PassMark feature allows you to change your image or phrase at anytime and as often as you like. You can select from the many images available, or you can choose to upload your own picture. Your new image and phrase are then presented to you each time you log in.

To use exiting pictures for your PassMark:

·    Click the Change PassMark button.

·    Select an image by Category or the Get More button or even one already displaying on screen.

·    Make any desired changes to your PassMark phrase.

·    Finally, click Submit to save any changes you’ve made.

to upload a picture for your Pass:Mark

·    Copy or save your picture in .gif or .jpg format onto your computer.

NOTE: Although we support uploading of images up to 5 MB in size, it is easiest to use a smaller file.

·    Click the Change PassMark button.

·    Click Browse button near the bottom of the page.

·    In the Choose File dialog box, browse and select the picture from your computer to upload.

·    When you've found the picture click the Open button.

·    The phrase “Upload Selected” will appear under the file name you just selected.

·    Make any desired changes to your PassMark phrase.

·    Finally, click Submit to save any changes you’ve made.