Multifactor Authentication provides added security for Keystone@Home users.

In order to make your Keystone@Home experience as secure as possible, and to comply with Federal regulatory guidelines, (FFIEC) we have introduced new security features. This is an important part to your Internet security. The new security features add a layer of protection to your online account by letting you know you are at our Keystone@Home web site, and lets us know it is really you trying to access your account.

Multifactor Authentication has two parts.

Part 1: Split Screen Authentication - the use of two separate sign-on screens

When signing on, you will enter your account number and user ID on one screen and your password on the next. The password must be entered using your mouse. Why? Because passwords are only as secure as a hacker's ability to guess, record keystrokes or fraudulently obtain a password. By using the mouse method, we have secured the password from being obtained using keystroke recording software.

Part 2: Personalizing your Sign-On - Selecting an image, phrase and several security "challenge questions"

This phase allows you to register the computer you will be using for home banking. If you use another computer, you will be prompted to complete information for that computer as well. Once complete, every time you log on, you will see you specific image and phrase. Never enter your password without seeing your personal image and phrase.

 

Frequently Asked Questions (FAQs)

Why is my online experience changing?

 In order to make your online experience as secure as possible, we have introduced new security features.  These new security features will be an image and phrase that is personalized by you.  When you see the image and phrase you have selected, it gives you the confidence that you are at Keystone's Home Banking site.  This means you can now conduct online transactions with confidence.

 What is the new security system?

 The new security system adds a layer of protection to your online account by letting you know that you are at Keystone's Home Banking website and letting us know that it’s really you trying to access your account.

Letting you know it’s really us

The new security system will help you distinguish Keystone's Home Banking website from a look-a-like.  Upon registering for  the new security feature, you will be required to select a secret image and phrase. When you see your image and phrase displayed on the screen, you can be confident that you are your Keystone Home Banking site and that it is safe to enter your password.

Letting us know it’s really you

If we do not recognize the computer being used when you are logging on we will ask you to verify your identity by answering your security questions.

When you sign in from a different computer, you are asked to answer a Security Question to protect your account.  You can choose to have the system remember your computer so you will not have to answer your Security Question in the future.

Why do I need the new security system?

 Recently there have been attempts by fraudsters to trick people into revealing their personal information, such as passwords, by creating bogus websites that look very much like the sites of legitimate financial institutions.  They send out emails with links to these bogus websites claiming that you need to log into your account.  This phenomenon is called phishing, (pronounced “fishing”).  We are committed to proactively protecting our members against such attacks.  By making sure you always see your personal image and phrase before entering your personal information, you can ensure your information is being entered on a legitimate site.

 How does it work?

 When you visit Keystone, you know our faces and we know yours.  Our new security feature does the same thing over the Internet.  When you enroll, you will select a secret image and phrase known only to you.  Whenever you log-in to Keystone's Home Banking, we will display this image so you can feel confident that you are accessing the legitimate site of your financial institution and not an impostor site.  Remember: Never enter your password without seeing your personal secret image and phrase.

 We also check the computer(s) or device(s) that you are using to access the website.  Typically you will access the website from one or two computers, such as your work and home computer.  The system remembers your computer.  Should you need to log-in from a different computer, such as an Internet café, we will take additional steps to verify your identity, such as ask you to provide the answer to your secret questions. No personal or private data is stored in any way.

 How am I more secure with the new security system?

 The new security system protects you from accidentally revealing your username and password to a bogus site.  In addition, if someone does get your username and password, they will still not be able to access your account because they are not at your registered computer.

 

It is important to make sure that you NEVER enter your password without seeing your personal image and phrase.