Multifactor Authentication and Challenge Questions - Our New Enhanced Login Security
In compliance with new FFIEC guidelines, Marine FCU has implemented a new multifactor authentication system for online account access. This new enhanced login security will replace our current authentication process and will provide a higher level of security for your online account access.
The Enhanced login security verifies you as the true "owner" of your accounts by not only authenticating your user ID and password, but also by recognizing your computer. You are able to enroll each computer regularly used to conduct online account access by using a one-time registration process. Once the registration process is completed, a browser-based secure cookie will be placed on the enrolled computer. This secure cookie will be the second authentication factor when members log into their account. If you are attempting to access your account by using a non-enrolled computer, you will be prompted to answer challenge questions as an additional line of defense against unauthorized account access. If you would like to unenroll a computer, you may do so conveniently at anytime.
Participation in this security feature is mandatory.
This new security service is free, simple and just another way Marine FCU is looking out for you.
View the Demo.
Member's Advocate Corner - Multifactor Authentication, Protecting Your Identity
What is Authentication?
The process of verifying the identity of a person or entity.
Back to Top
Why is Marine FCU switching to Multifactor Authentication?
FFIEC guidelines for higher security.
Back to Top
What are the advantages of Multifactor Authentication?
More consistently reliable, and much better at deterring fraud attempts.
Back to Top
What does Multifactor Authentication protect me from?
Phishing, pharming attacks, dictionary attacks, keystroke logging viruses, use after reported loss.
Back to Top
Is a user logon ID considered one of the factors in multifactor authentication?
No, because user logon IDs are not secret.
Back to Top
No. By definition true multifactor authentication requires the use of solutions from two or more of the three categories of factors. Using multiple solutions from the same category at different points in the process may be part of a layered security or other compensating control approach, but it does not constitute multifactor authentication.
Back to Top
When I purchase a new computer, will the new computer need to be registered and how do I un-register my old computer?
Any new computer will need to be enrolled for Multifactor Authentication. Old computers can be un-enrolled by logging on to your MFCU@Home account and choosing the option under User Options.
Back to Top
If I provide the IP address I will be using, can Marine FCU complete the registration process on that machine on my behalf?
No, you must enroll the computer yourself. Multifactor Authentication Level 1 does not use IP addresses.
Back to Top
MFCU@Home users will be able to easily enroll additional computers.
Can Macintosh/Apple users participate in Multifactor Authentication?
Yes, Macintosh/Apple users will be able to use Multifactor Authentication, as well all other users as long as they are using one of the supported browsers.
What are some examples of challenge questions?
Challenge questions may include:
What is the name of the last High School you attended?
What was your high school mascot?
What is your mother's birthday?
What is your favorite hobby?
What was the model of your first car?
In what city was your mother born?
Back to Top
Why is an email address required on the Challenge Question setup screen?
An email address is required because the Challenge Questions are now used by both the Forgotten Password feature and by Multifactor Authentication. The Forgotten Password feature requires an email address [as it always has] because Marine FCU sends an email to you when there has been an unsuccessful attempt at changing the password on your MFCU@Home account. In the event that you did not attempt to access your MFCU@Home account, please contact Marine FCU Member Service at 910.577.7333, opt. 1 or 800.225.3967, opt. 1. Marine FCU will never sell or provide your email to any third party for solicitation purposes.
Will you be able to choose your own Challenge questions?
You will be able to choose which question out of several questions to use, but you will not be able to enter your own challenge question.
Can I access multiple accounts from one computer?
One secure cookie will be stored in the browser for each account.
Will I need to uninstall the Authentication device if I get rid of my computer?
There is a feature that allows you to disable all cookies on all machines and then re-install a cookie on the desired machine, and in Phase 2, a Flash Shared Object as well.
Can I access my account on a computer that is not registered?
Yes. By answering a series of predetermined security questions, you may access your account from any computer, even if it is not registered.
How is my identity authenticated when I request to enroll (place a device ID on) my PC?
The first time you enroll, you are authenticated with a User ID and password. From that point on, two factors are always required.
Is the MAC address part of the security authentication?
No.
Can this device ID be cleared with spyware tools?
The cookie components will, in general, not be deleted by anti-spyware tools. The cookie device ID can be deleted, it is not a downloaded certificate.
Will this prevent Trojan logging software from compromising passwords?
Multifactor Authentication by itself will not prevent the compromise of passwords.
What is a cookie?
A file used to collect information on the local computer of a person using the World Wide Web, used chiefly by websites to identify who has previously registered or visited the site.
Can you easily delete the cookie?
It is possible for you to delete the cookie itself. It can be reinstalled the next time the you log in from that computer. Our own research, and that of other organizations, indicate that most users rarely delete all of their cookies. In addition, in the future we expect to add a backup storage mechanism in the form of a Macromedia Flash Shared Object to help provide a safeguard in case the cookies are deleted.
If you do delete your cookies, what happens?
If you delete the Multifactor Authentication cookie, will you be prompted to answer challenge questions or input the one time passcode at your next login.
If you are using a public computer, what happens with the cookie? Is it cleared upon log out?
You may choose not to place a cookie on a public computer, in which case the cookie would not be present. If you did place a cookie on a public machine, it would remain on that computer until it expired or was otherwise deleted (many public computers automatically delete all cookies at end of day). Instead of enrolling that computer (and placing a cookie on that machine), you should enter your user ID, password, and then answer your challenge questions to get in.
Suppose I no longer wish to use a particular PC, is this cookie cleared using the standard “clear cookies” method?
You will have the option to remove extra security from their PC via the Multifactor Authentication User Options behind MFCU@Home.
Are there any issues with cookie installation if I have personal firewalls?
Personal firewalls should not affect the installation of the browser cookie.
Do cookies or pop-ups need to be enabled to access the browser-based solution?
The same browser setting requirements that are required today will also be required for Multifactor Authentication. Test your browser now.
What if my computer is set not to accept cookies?
In order to utilize online account access, your cookies must be enabled.
What are the recommended Browsers and Versions?
Microsoft Internet Explorer 6.x (includes AOL 8 & 9)
Netscape 7.2
Mozilla Firefox 1.0
Safari 1.2
How can you tell what browser and version you are using?
Open your browser.
At the top, click on HELP.
Select ABOUT (Name of Browser).
Help will display the version of the browser you are using. Click on OK to exit.
What are the Cookie and JavaScript settings?
Cookies - Session=Enabled, Permanent=Enabled
JavaScript - Enabled
What if I can’t remember my challenge question?
Call 910.577.7333, opt. 1 or 800.225.3967, opt 1 and someone can reset your challenge question.
What does it take to reset my account?
The existing process for resetting your account will remain in place.
-
MFCU@Home FAQs & Information
