Security
Security Center
How we protect your accounts and what you can do to protect yourself. Read the practical steps, then review your own security settings in online banking.
Two separate secrets
Your sign in password and your transfer PIN are different and stored separately and protected.
Email verification
Sensitive actions require a code sent to your email address on file.
Device and session control
See where you are signed in and end any session.
Automatic sign out
Sessions end after a period of inactivity.
At a glance
- Sign in
- A password, plus a separate transfer PIN to move money
- Verification
- Email codes only, never text messages
- Sessions
- End automatically after a period of inactivity
- Devices
- See every device that is signed in and end any session
- History
- A full record of sign ins, successful or not
- Alerts
- A notification when a new device signs in
Simple habits that help
Most account takeovers begin with a phishing message or a reused password. A few habits make you much harder to target.
- Use a long, unique password for online banking
- Never share your transfer PIN or email codes
- Type the address of our site instead of following email links
- Review your sign in history regularly
If something looks wrong
Sign in and change your password, sign out other devices and contact us. If you cannot sign in, use Forgot password or call the number on the back of your card.
- Report the message through the Help Center
- Freeze your cards in one tap
- Ask us to review recent transactions
How we protect your accounts
Several layers work together, so one mistake does not expose your money.
- Repeated failed sign ins lock an account temporarily
- Extra verification can be required before a transfer completes
- Sessions time out when you are inactive
- Sensitive changes are recorded in your account history
What to do if you think something is wrong
Act quickly. Small steps limit the damage.
- Change your password and sign out other devices
- Freeze any card you are worried about
- Contact us and ask us to review recent activity
Secure your profile
- 1
Use a long, unique password
Do not reuse a password from another site.
- 2
Keep your transfer PIN private
It is different from your password and we never ask for it.
- 3
Review your devices
Sign out any session you do not recognize.
- 4
Turn on alerts
Know right away about new sign ins and account activity.
Frequently asked questions
Quick answers about security center.
Will you ever ask for my password?
Do you use text message codes?
How do I report a suspicious email?
What if I enter the wrong transfer PIN too many times?
How do I see where I am signed in?
Will you email me about a new device?
Ready to get started?
Open an account online in about ten minutes, or talk to us first. You will need your address, date of birth and an email address.