We're Taking Online Security To A New Level!

Starting First Quarter , your EzPAL account will be protected with a higher level of security. The EzPAL Home Banking security enhancements will better protect you against online theft and fraud, provide you with more peace of mind when banking online, and will minimize the risk of falling victim to a "spoofed" web site.

How It Will Work

You will complete a simple, one time enrollment process the first time you log into the enhanced system.

1. You'll select a picture from an online library; the image will be displayed to you on future EzPAL logins. The image is known only to you and the credit union.
2. You'll enter a word or phrase that will be displayed along with your image when you login. The text phrase is known only to you and the credit union.
3. You'll select three "Challenge Questions" and provide the answers to the questions.

Logging into EzPAL

After enrollment, when you log into EzPAL you'll enter your current ID, then we'll show you the picture and text phrase you selected. If the image and phrase shown are correct, you'll continue with the login and enter your current password. This is your assurance that you are logging into the legitimate PIMA FCU website, since no one else knows your image and text phrase- only you and us.

PLEASE NOTE: Your Current User Name And Password Doesn't Change!

Challenge Questions

Challenge questions will only be displayed if you log into EzPAL from a different computer than you normally use when you enrolled. If we don't recognize the computer, we will double check that it is really you. This is another layer of security designed to protect your account from unauthorized access if your account information is stolen, and help us identify you when you are logging into EzPAL from an unknown computer. You'll have the opportunity to "register" computers you regularly use to access your online account. Once you successfully answer the question, we'll show you your picture and phrase.

This enhanced security will not require you to have any additional hardware or software for your computer. All of the identification and validation takes place behind the scenes- creating a silent but secure login.

The protection of your financial information and the security of your online transactions are very important to us. We will continue to update you as we get closer to implementation.

=================================================================

Multi-Factor Authentication for Online Access Home Banking Self-Study Training Guide

 We have added a new layer of security to EzPAL.  This security will help protect our members against phishing and web site spoofing attacks, and provide them with more peace of mind when they access their accounts online.

The security upgrade will change the way our members login to their account.  We are beginning to communicate these changes now in preparation for the live date, which is set for 01/23/2007.

Here’s how the login process will change

1. You will complete a simple, one-time enrollment process the first time you log into EzPAL after the security upgrade.
2. You’ll select a picture, from an online library of images; the image will be displayed to you on future EzPAL logins.  The image is known only to you and the credit union. 
3. You’ll enter a “PassPhrase,” or text phrase, that will be displayed along with your image when you login.  The text phrase is known only to you and the credit union. 
4. You’ll select three “Challenge Questions” and provide the answers to the questions. 

Logging into Online Access
After enrollment, when you log into EzPal, you’ll enter your User ID.  Then, we’ll show you the picture and text phrase you selected.  If the image and phrase shown to you are correct, you’ll continue with the login and enter your password.  This is your assurance that you are logging into the legitimate PIMA FCU  web site, since no one else knows your image and text phrase – only you and us.

Challenge Questions
Challenge questions will only be displayed if you log into EzPAL from a different computer than you used when you enrolled.  If we don’t recognize the computer, we will double check that it is really you.  This is another layer of security designed to protect your account from unauthorized access if your account information is stolen, and help us identify you when you are logging into EzPAL from an unknown computer.  You’ll have the opportunity to “register” computers you regularly use to access your online account.  Once you successfully answer the question, we’ll show you your picture and phrase.

Security Upgrade FAQ

Why are you making these changes?	The security enhancements will offer you added safety by helping ensure that only you can access your credit union account.
What is this new security feature?	You have always authenticated yourself to EzPAL when you log in with your User ID and password.  Soon, we’ll also authenticate ourselves to you.  You will know with certainty that you are visiting PIMA’s, EzPAL site because you will be presented with your picture and text phrase every time you logon.
Why is PIMA introducing this feature?	PFCU has never been successfully hacked, and no members have been phished. But, phishing is the fastest growing crime in the country.  To ensure we proactively keep our members safe and secure, we will be implementing this new security feature.
Why do I need a picture and text image to logon?	Fraudsters attempt to trick people into giving up their personal information, such as passwords and account numbers, by creating fake web sites that look a lot like the real web site.  This is called phishing. Your PassMark image and text phrase are a simple countermeasure to these attacks, as well as protection against other forms of identity fraud.
How will the site be more secure?	The security upgrade will protect you from accidentally revealing your user ID and password to a fake site.  In addition, if someone does somehow get your user ID and password, he will still not be able to access your account because he is not at your registered computer.
What happens if my password is stolen?  How will you keep someone from accessing my account?	When someone tries to login using your stolen user ID and password, we will recognize that they are logging in from a different computer, and we will ask them a secret question.  Since only you know the answers to your secret questions, they will not be able to give a correct answer.  They will not be able to login.