Changes to the CU OnLine Login Page

The CU OnLine login process is changing in three ways: 

1)     Login will become a multiple step process (detailed below)where you enter
your Account (Member) Number, PIN and Random Security Code.

2)     The first time you login, you will be asked to enter three challenge questions and corresponding answers as well as a Security Key Image (details below).

3)     During subsequent logins, you may be asked to answer a challenge question and verify the Security Key Image that you select (details below).

The Specifics

First Time Login
(This will only occur the first time you log into CU OnLine after August 15)

Step 1.  Enter Account (Member) Number and Random Security Code. There are no changes to this page, other than you will enter the Random Security Code displayed in the box. You will not enter your PIN at this point. You will be asked for your PIN on a subsequent login screen.

What is this for? – This keeps sophisticated hackers from programmatically guessing a PIN/Password. The code changes each time you log in and is in a format that cannot be read by a hacker’s program.

Step 2.  Enter in your Challenge Questions and corresponding Answers.  These should be questions and answers that only you know and cannot be easily guessed. If you cannot think of a question, you may used the pre-established questions from the drop-down menu.

What is this for? –   These are questions that will come up if you try to log in at a public computer, or one that you have not registered. If you log in from a computer you have registered during the login process, you will not be asked these questions. To help protect your personal information, we recommend that you only register computers which only you have access to. Only one of the three questions (chosen at random) will appear each time. These questions will again help personalize your access.

Step 3.  Enter your PIN, the Random Security Code, Security Key (a word that you select that will be converted to an image to identify us to you), and your email address.

       What is this for? - The account (member) number and PIN are the same as you
      have entered in the past.
      The Random Security Code is again used to prevent hackers from programmatically
      guessing your PIN. The Security Key is another function used for your protection.
      It is a personalized word, number or short phrase that is displayed on the login
      screen and at the top of the Balance page when you log in to CU OnLine. It is
      designed to alert you of a possible Phishing attack. Phishing attacks use spoofed
      emails and fraudulent websites designed to fool recipients into divulging personal
      financial data such as credit card numbers, account usernames and passwords,
      social security numbers, etc. A Phishing attack may be able to copy the look and
      feel of a website, but it will not be able to replicate the Security Key that you enter.
      If you have set the Security Key, and it is not present at the top of the page when
      you login, contact the credit union immediately, as your account may have been
      compromised by a Phishing attack.

      To change a Security Key after the initial login, type the desired word, number, or
      short phrase into the "Security Key" field located at the top of the Member Info
      section of the User Settings page and click the "Add/Change" button. To remove the
      Security Key, click the "Delete" button

Subsequent Logins:

      Step 1.  Enter Your Account (Member) Number and Security Code.

      Step 2.  If PC is registered, skip to Step 3.  Otherwise, answer your Challenge
     Question.

Step 3.    Verify Secure Image and enter PIN.

        
         Optionally, you can also register your computer (this places a unique secure cookie on
           your PC that identifies your computer to the authenticating server).

What is this for? –   This is a very important step to understand. If this is a computer that only you or your family have access to (i.e. a home computer) then by registering the computer you will not be asked the personal questions setup during the first login. Any login attempts at non-registered computers will prompt you with your personal questions.

Return to CU OnLine Enhancements Guide Home Page >>