online banking security
Security Overview of Peoples State Bank’s Online Banking Product
- Recommended security practices that you should follow on your computer
- Frequently Asked Questions (FAQs)
Our Web site brings together a combination of industry-approved security technologies and practices to protect data for the bank and for you, our customer. It features Secure Sockets Layer (SSL) technology to provide 128 bit encryption, authentication and data integrity. A VeriSign-issued Digital ID is used to provide public and private key cryptography thus authenticating traffic between our customers, service providers and the bank’s private databases. Industry standard firewalls are in place and traffic is monitored using Intrusion Detection technologies.
In addition to the technologies and equipment, the bank and its service providers have regular audits, exams and penetration tests to ensure that the latest and best practices in internet security are followed.
2. Security Recommendations
Peoples State Bank recommends the following security practices on your computer.
- Do Not use public Internet stations and kiosks for accessing our Online Banking Web site
- Passwords should consist of combinations of letters, numbers and special characters
- Do Not use the “Save Password” feature on your browser
- Anti Virus Software should be used and kept up-to-date
- Your operating system should be kept up-to-date with current security patches
- Block SPAM Email and Pop-Up advertising, which are often carriers of spyware, viruses, trojans, and other malicious code.
- Protect your computer from spyware and keystroke loggers.
Peoples State Bank suggests that you consult an expert if you need assistance implementing any of these recommendations.
3. Frequently Asked Questions
I’ve enrolled. Now what?
You will receive a Welcome letter via email or US Mail notifying you that you are enrolled and ready to go online. Simply go to our Web site, www.psbwi.com, use the Online Banking link. Click on Enter. At the logon screen enter your Social Security number (businesses enter their TIN) in the USER ID field (111223333), and the 16 Character bank assigned passsword in the password field. Your password is case sensitive so be sure to enter it exactly as you received it. You will be required to change your USER ID and PASSWORD as soon as you logon.
Your User ID must be at least 6 characters long and include at least 4 letters and 1 number. A common format for a person named John Smith might be jsmith12. Keep in mind that someone else may already have reserved the User ID which you are trying to use. If you try to use a User ID that is already in use you will receive an error. Please create a different User ID and try again.
You will also be forced to change your password.
Password rules: Passwords must be at least 6 characters long and include 4 alpha, at least 1 special character and 1 number. For special characters we recommend using the symbols above the numbers 1-9 on your keyboard (!@#$%^&*). For example, this is an acceptable password, 33redski#. Your password cannot be the same as your User ID, your Social Security number, your name or commonly used passwords such as Packers, Brewers, Peoples, etc. Be assured that these restrictions are for your own protection. Passwords expire ever 6 months. you will receive warnings about the upcoming passsword expiration 20 days prior. Please change your password when you receive a prompt warning you that it will be expiring.
You will also be asked to select and answer two security questions (sometimes referred to as "challenge" questions). These questions will be used to assist you at a later date if you forget your password.
My temporary password is 16 characters long.
When I am prompted to change my password does it need to be that long?
No, it can be as short as 6 characters long. The password rules are listed above.
What if, during login, I enter my password incorrectly?
If you enter the correct User ID but use the wrong password your account will be locked after 3 invalid login attempts. You will need to call Customer Service at Peoples to unlock your account or you can try using the "Forgot Your Password" button. This feature will prompt you to answer your security challenge questions. If you answer them both correctly then you will be prompted to create a new password.
Password Forgetting Feature
If you forget your password you can select the button, “Forgot Your Password?”, and the system will prompt you to answer your two security questions. If you attempt to answer the questions and are unsuccessful for 3 times then the system will lock your account requiring a bank employee to unlock the account. If you answer the 2 challenge questions correctly your account will be unlocked and you will be required to create a new password and re-answer the challenge questions.
Can I change my password?
You will use your original password to login the first time. Then, it will prompt you to change your password. You can change your password as often as you like. For the strongest security, please use random words and numbers. Never use easy to guess passwords such as a simple series of numbers, a child's name, a birth date, etc. Always remember to keep your password in a secure place. To change your password, click on Services>Change Password.
- Enter your old password in the Old Password field.
- Enter your new password in the New Password field.
- Re-enter your new password in the Confirm New Password field.
- Click the ‘Submit’ button to save these changes
Notes: Asterisks appear when entering the password for added security
The Complete Password Rules are listed earlier in this FAQ document.
How do I know that my banking session is being protected by encryption?
Both Netscape's Navigator and Microsoft's Internet Explorer offer visual assurance that your banking session is protected. When in an encrypted session, Netscape's Navigator, equipped with 128-bit encryption, will display a double-tooth key in the lower left corner of your monitor. A single-tooth key is displayed for Netscape browsers equipped with 40-bit encryption. Netscape Navigator, version 4.04, will display a lock at the bottom of your screen. Similarly, Microsoft's Internet Explorer will make visible a closed padlock in the lower right corner of your monitor. Generally, when not in a secure session, the key image will appear broken and the padlock will look open. Please note, however, that some browser versions may not display a symbol when viewing an unencrypted page. As a general Web site usage matter, Peoples State Bank recommends that you use Microsoft Internet Explorer browser version 5 or later and keep it patched with the latest security updates.
Checking for Security
To determine the security of a Web page, click inside the page with the right mouse button, click Properties on the menu that appears. The connection information should show that the connection is encrypted. Typically, the wording should be something like: SSL 3.0, RC4 with 128 bit encryption (High); RSA with 1024 bit exchange.
You can also check to ensure that a digital certificate is in use by clicking on the Certificate button on that same page. The Issued listing should be our technology partner, Precision Computer systems . Their website will be listed as: Ibank.pcs-sd.net. Verisign is the issuer at www.verisign.com.
What happens if I don't exit the system?
By default Peoples State Bank Online Banking has a 10 minute time out feature, so if the system is not used for 10 minutes, then the user will be inactive and will have to log in again. Once ten minutes has elapsed, you will be taken back to a login screen after the next selection is made.
Under a scheduled transfer, I see “********” in the display field, What does that mean?
If an account becomes invalid such as Closed or Dormant, asterisk will display in this field. In the event the account is dormant, please contact Customer Service.
If the Web site is not refreshing properly.
Sometimes a copy of certain information from web pages gets left on your PC in what is called a cache. If you want to make sure that you receive the most current version of a web page you should clear your cache. The instructions to do this are unique to each browser and even unique within versions of the same browser. The best way to get information about this is to consult the online help available within your browser. Usually this is accessible from a Menu item called, HELP.
Can I access the Online Banking Web site without 128-bit encryption?
No. You must update your Internet Explorer's encryption level to 128-bit. This can be done free of charge at the Microsoft's Web site. Once there, you choose your correct operating system and Internet Explorer version and download the encryption update.