|
INTRODUCING PASSMARK™
A NEW LAYER OF SECURITY
First National Bank of McHenry is working hard to add
additional security measures to our online banking services
so that you have the confidence that your information is
being protected.
Within the next month, First National Bank of McHenry is
adding an additional layer of security that will change the
way you log into Personal Online Banking. These changes will
provide even greater levels of protection against fraudulent
attacks such as phishing, spoofing, key logging, and
identify theft. All users will be required to select
challenge questions and answers, select a unique image and
create a personal description (also known as the
Authentication Pass Phrase) for the image that is only known
by you. Each time you log in thereafter, the image and
Authentication Pass Phrase will appear to verify to you that
you are on the official First National Bank of McHenry’s
website before entering your PASSWORD. You will NOT have to
select a new Password during this process.
The final level of the new security is the authentication of
your computer. First National Bank of McHenry has the
ability to recognize the computer or computers from which
you usually log on. If our system detects a suspicious login
due to an unfamiliar computer, it will automatically present
you with challenge questions that were previously selected.
GETTING STARTED IS EASY!
STEP 1: Login using your ACCESS ID. Click Submit.
Note: The login page is now split into two separate pages.
Neither your ACCESS ID or PASSWORD have changed.
STEP 2: Enter your PASSWORD. Click Submit.
STEP 3: Verify that your e-mail address is correct.
STEP 4: Enter an Authentication Pass Phrase underneath the
image.
Note: Do NOT make this Authentication Pass Phrase the same
as your Password.
STEP 5: Select your challenge questions and provide your
answers.
STEP 6: Select whether to register this computer.
Note: Only register personal computers that you frequently
use and are not available for public use. Examples of public
use computers include those found in internet cafes, hotel
lobbies, libraries, etc.
STEP 7: Click Submit
The next time you log onto our internet banking service,
First National Bank of McHenry will recognize you and
display the image and the Authentication Pass Phrase you
selected. If we don’t recognize the computer you are using
to log in, we will ask you to answer one of the security
questions you previously created. After completion of the
steps above, if you don’t see the image you selected, exit
the site immediately and notify the bank.
FREQUENTLY ASKED QUESTIONS
Q: What’s the point of all of this?
A: Having your personal information stolen is a major
buzzkill. Anything we can do to make your online banking
experience safer and more secure is in both yours and our
best interest.
Q: Does this process have a name?
A: It is called Layered or Multi-Factor Authorization (MFA).
If you haven’t heard of it by now, you will very soon.
Financial Institutions across the country are implementing
similar MFA procedures and solutions.
Q: How does Multi-Factor Authorization work?
A: Upon your initial registration, First National Bank of
McHenry’s host computer will verify some of your personal
computer’s forensic characteristics in the form of a secure
cookie that does not contain any personal information as
well as checking various shared objects on your personal
computer’s hard drive. Upon subsequent logins from the same
computer, we will be able to verify that we have
communicated with that particular computer previously. By
entering your Access ID and Password, we are able to verify
that we are communicating with you. Thus, the term,
Multi-Factor Authorization.
Q: What if I my Internet Explorer privacy settings are
set to block all cookies?
A: We will have a very difficult time authenticating your
personal computer as one we have communicated with in the
past. Blocking all cookies is a security procedure that is
extreme. You can safely browse the internet with your
privacy settings at High or lower.
Q: What if I routinely delete my cookies from the browser
cache or reinstall various hardware and software components?
A: You will need to re-register the computer.
Q: What’s the deal with that funky image and the
Authentication Pass Phrase ?
A: The image and Authentication Pass Phrase is to let you
know we have completed authentication of your personal
computer and to let you know you are on our secure site. You
will always see the same image and Authentication Pass
Phrase. If you do not see the image and Authentication Pass
Phrase you selected, you are not on our secure site. DO NOT
ENTER YOUR PASSWORD.
Q: The image you randomly selected during registration
disturbs me. Can I change it to something that I like?
A: Yes. After you successfully login, click the Change
Password button. Select Change Security Data. There are
30,000 images from which to choose. You should find
something more to your liking.
Q: What about changing the Authentication Pass Phrase or
the Challenge Questions and Answers. Can they be changed as
well?
A: Yes. After a successful login, click Change Password
options button. Select Change Security Data.
Q: Do I have to be truthful about my answers the
Challenge Questions ?
A: Not necessarily. But be prepared to remember what you
answered. We, quite honestly, don’t care if you tell us the
Chicago Bears are your favorite sports team (when in reality
you are a closet Packers fan). Just make sure you are
consistent with your answers. Failure to correctly answer
the Challenge Questions will result in a lock out.
Q: I’m getting the error “Unable to Process Request – Try
Again Later or Contact Customer Support.” Why?
A: You likely answered a Challenge Question incorrectly.
There is also a possibility that you are spelling your
answer differently from when you registered. Either way,
this condition will result in a lockout of your online
banking session. Please contact Customer Service in order
for the bank to release the lockout. The Security Questions
and Answers will need to be provided at next log in. The
option to register the computer is also presented.
Q: I access my account from both my home computer and
work computer. Can I register them both ?
A: Yes, you may register multiple computers. Choosing
whether to register a work computer is an individual
decision that should be made on a case-by-case basis. One
factor to consider before registering a work computer is how
many potentially deviant people that you work with have
access to that same computer. Although, the computer itself
would be registered for Multi-Factor Authorization, the
deviant would still need to know your ACCESS ID and PASSWORD
to gain access to your accounts.
Q: I work with a lot of deviants and busybodies, so I’m
choosing not to register my work computer. Can I still log
in to Personal Online Banking from my work computer?
A: Yes. After entering your ACCESS ID, your authentication
image and Authentication Pass Phrase will appear. After
entering your PASSWORD, our host computer will recognize
that you are logging in from an unregistered computer, and
ask for the answers to the randomly selected Challenge
Questions.
Q: I accidentally registered a public computer; is this
really a problem ?
A: It could be. The only way some one could access your
personal information is if they knew your ACCESS ID and
PASSWORD as well. So immediately changing your PASSWORD from
a registered non-public computer is advised. Furthermore,
you should contact the bank and request that we delete your
Multifactor Authorization specifications. Doing so, will
erase the registration data of the public computer you
accidentally registered. It will also erase the registration
data for non-public computers which, in turn, will require
your non-public computer to be re-registered.
Back to top
|