Multi-Factor Authentication

To provide more security online, Energy One is implementing a feature called Multi-Factor Authentication (MFA) for Online Bank that everyone will be required to use.

Enrollment begins January 4, 2007, and lasts for several weeks until all members have enrolled. Your birth month will determine the timing of your individual enrollment. You will be notified by Online Bank before you're required to enroll.

With MFA, you will enter only your member number to begin logging in. After you have been enrolled, you will be shown an image assigned to you, and a security phrase you choose. That way, you know for sure you're at Energy One's site, and you can feel comfortable entering your password.

When you first enroll, you will choose three security questions and enter the answers. You will also choose whether or not to register your computer. We recommend that you register the computer(s) you will use to access your account(s). If you try to access your account from a computer that is not registered, you will be prompted to answer the security questions.

IMPORTANT! Remember that Energy One will never ask for your account information in an e-mail. You should never follow a link in an e-mail. You should always go directly to Energy One's site to enter any information.

What is MFA?

MFA is a new security feature that provides an extra layer of security that works 24/7 to protect your Online Bank account, even when you are not banking online. MFA helps you guard against fraudulent online activities like Phishing scams and identity theft. This new security feature provides an image and phrase that is personalized by you.

How does MFA work?

Once you enroll in MFA, the new security system recognizes your computer. If questionable logon attempts are detected, the system will require additional identity verification before allowing access to your Online Bank account. You will select an image and a phrase known only to you. Whenever you log on to your Online Bank account, the system will display the image you selected so you can feel confident that you are accessing your legitimate Online Bank site and not an impostor site. The system also checks the computer(s) that you are using to access your Online Bank account. Typically, you will access your account from one or two computers, such as your work and your home machine. The system "remembers" your computer if it is registered when you set up the security system.If you logon from a different computer, the system will take additional steps to verify your identity, such as asking you to provide the answers to your own personalized security questions.

Why is MFA being added?

We take our obligation to protect our members seriously. To make your Online Banking experience as secure as possible, we are introducing this new security feature. After you enroll in this new security system, most of the time, your logon will be the same as it was before. The only difference is that now you will have an extra layer of security working behind-the-scenes to protect your account 24/7, even when you're not online!

Why do I need this new security system?

The increase in threats to the security of personal financial information and funds are causing concern among credit unions, members, and regulators. According to the Federal Financial Institutions Examination Council's suggestion, we will implement MFA on our Online Bank product. We are committed to proactively protecting our members against fraudulent online attacks like "Phishing" (malicious requests for your personal information).

How am I more secure with MFA?

If the user name and password are stolen, the third party will still not be able to access your account because he/she is not at your registered computer. And since the computer is not registered, the system will prompt the security questions, to which only you know the answers.

How do I sign up for MFA?

Expect to be prompted at some point while banking online to enter additional information. This will include choosing your personal digital image and caption as well as several security questions to which only you know the answers. Once this occurs, you have added a layer of protection to your account!

What keeps someone from stealing my secret image and phrase?

The system only shows your secret image and phrase if you log on from your own computer, or after you have answered the security questions. So, it is not possible for an unauthorized person to get access to your image and phrase.

Why am I being asked a question when I try to log on?

The system asks you a secret question when it detects that you are trying to log on from a different computer than the one you used to register MFA. This is to prevent someone with stolen passwords from logging on to your account from a remote location. Since only you know thge answer to the questions, the system will know whether it's really you. Generally you will be asked to answer a secret question only when you log on for the first time from a new computer. After you answer the question, you will be asked whether to register this computer for future logons. If you are using a personal computer and plan to use it again to access your account, you answer yes. If you are using a public terminal (like a public library computer), you will want to answer no.

Can I access my account from multiple computers?

Yes. There is no limit to how many different computers you can use to log on to your Online Bank account. However, if you log on from a new computer or a public terminal, you will need to go through one extra step of identification validation by answering some security questions. This helps protect you by keeping unauthorized people from accessing your valuable information.

I am not an Internet expert! How easy is it to use MFA?

It is extremely simple. You don't need to memorize anything new - just use the site as usual and look for your secret image and phrase at logon.

Does the the Multi-Factor Authentication enhancement affect Quicken or Microsoft Money?

Yes, you will still be able to download the file from Online Bank and open it with those programs, but your software will no longer automatically log-in with your stored password, unfortunately.

I share my computer with someone who has his/her own credit union account. Can both of us still log on from the same computer?

Yes, you both can use the same computer to log on to your individual accounts. There is no limit to how many people can log on to the credit union website from the same computer.

What happens if someone steals my password? How will the new security system keep them from accessing my account?

When someone tries to log on using your name and password, the system will recognize that they are logging on from a different computer, and ask them some security questions. Since only you know the answers to your secret questions, they will not be able to give a correct answer. They will not be able to log on.

Can I change my secret image and phrase?

Yes, you can change your secret image and phrase at any time. To make the change, go to the MFA preference screen after you log on to your account. Important!!! Never enter your password without seeing your personal secret image and phrase.

I don't see my secret image and phrase after logging on from my own computer and the system is asking me a question. What is happening?

This might happen in rare cases if you have deleted all cookies on your computer. The security question is a way to validate your identity. The easiest way to ensure this is by typing https://www.energyone.org directly into your web browser's address area. Then, after you answer the security question correctly, you should see your secret image and phrase. If your secret image and phrase is there, you can be confident that you are at your Online Bank website and can enter your password.

I already have anti-virus software and a personal firewall installed on my computer. Why do I need MFA?

It's good that you use anti-virus software and a personal firewall. Be sure that you keep both software programs up-to-date for the best possible protection against viruses, trojans and hackers. MFA protects against other threats, such as a stolen user name and password. It works with your other personal security programs, but it does not replace them.

When will I be asked for more information?

The system will ask you some personal questions when you first set up MFA. You will only be prompted to enter additional information when the computer you are using is not registered.

What do I do if I am locked out from my account?

You will have to call Energy One at (918) 699-7107 or 1-800-364-3628 to clear out the lockout.

How do I know if MFA is working?

You only need to complete the set-up process once. Afterwards MFA will work automatically. This means you are being protected 24/7 - when you're online and when you're not.

Is my personal information still safe?

Yes. In fact, your personal information is safer than ever before because the security system is making sure it is really you and not an unauthorized user trying to access your information.

If you should have any further questions about MFA or Online Bank, please contact Debra Lackey in our Information Technology Department:

Direct Telephone: (918) 699-7107

Toll-Free: 800-364-3628 ext 7107

E-Mail: dlackey@energyone.org