OnLine Teller FAQ

Security Questions

Does your site provide security to prevent my account information from being intercepted online?
How does encryption work?
What can I do to protect my accounts?
How many characters must my password be?
I am using Internet Explorer 5. When I type in my account number, my password is automatically inserted. Why does this happen and how can I prevent it from happening in the future?

Security

Does your site provide security to prevent my account information from being intercepted online?

Yes. We provide secure financial services through a protocol known as the Secure Sockets Layer. The Secure Sockets Layer prevents others from eavesdropping by encrypting all data transmitted between our site and your computer. Intermediate computers would see each packet of information as a meaningless jumble of bytes. The sending end encrypts, or encodes, the data with one key before it is transmitted. The receiving end decrypts, or decodes, the data with another key.

First Financial uses a global encryption system that encrypts data using strong 128 bit keys. Members using the following browsers will automatically have their data encrypted with 128 bit keys:

Microsoft Internet Explorer, version 4.0 or later
Netscape Navigator, version 4.0 or later
Other browsers with 128 bit encryption software installed.

Members using other browsers will have their data encrypted with 40 bit keys. A 40 bit key is less secure than a 128 bit key, but does provide an adequate level of security. First Financial members are encouraged to upgrade their browser software to one of the options above so that they may take advantage of 128 bit encryption.

The Secure Sockets Layer validates the identity of our site to you through the use of a digital certificate. After you connect to our site in secure mode, our site sends your browser a signed digital certificate, which contains the name of our Web server, its public encryption key, the certificate's validity dates, the name of the certification authority that issued the digital certificate to our site, and an unforgeable digital signature. The digital certificate authenticates to you that you are indeed connecting to our site.

Our site requires that you use a browser that supports SSL. For more information on SSL and encryption check out http://www.verisign.com/server/whitepaper/secure/security.html.

Back to Top

How does encryption work?

All the data that is passed back and forth over the Internet during your OnLine Teller session is encrypted and becomes a string of unrecognizable numbers before leaving your computer or our site. Our site and your browser hold the keys for solving the mathematical algorithms used to encrypt the data. Each time you establish an OnLine Teller session, our site and your browser agree on a random key that is used for that session. This makes it possible for the two computers to pass data back and forth and make it recognizable.

Back to Top

What can I do to protect my accounts?

Even though we are making use of technology to keep your data safe as it passes over the Internet, you still play an important role in keeping your account safe. You should memorize your access code. Do not write it down. Doing so may reveal it to others. It is a very good idea to change your access code often, especially if you access OnLine Teller from work. We have made it easy for you to do this. When you are done with OnLine Teller or if you need to leave the computer for any length of time, logoff using our "Logoff Button". Our system will also automatically log you off after 30 minutes of inactivity. However, for the best protection, you should logoff every time you finish with OnLine Teller.

When selecting an access code, do not use numbers or codes that are easily traced back to you. Using your birth date, social security number, phone number or address are all dangerous practices.

Back to Top

How many characters must my password be?

OnLine Teller uses 4 digit numeric access codes to control account access. Valid access codes are in the range from 0010 to 9998.

Your OnLine Teller access code is the same 4 digits used for PC Teller and Touch Tone Teller. If you change your code here, it will also be change in our other automated services. Your access code is not the same as your ATM, VISA or Check Card pin. Those pins are maintained separately and cannot be changed through OnLine Teller.

Back to Top

I am using Internet Explorer 5. When I type in my account number, my password is automatically inserted. Why does this happen and how can I prevent it from happening in the future?

This is a new feature with Internet Explorer 5. It's called "autocomplete". It can be turned off easily. Under the tools menu on Internet Explorer, click Internet Options. Select the Content tab. From the personal information area, click autocomplete then uncheck "user names and passwords on forms". Click OK, then OK again.

Back to Top