WebBanking - Security FAQs

At Allegacy, we made a promise to ensure the security of your financial information. With the continued growth of online banking, there are increased needs for greater security standards. In addition, the Federal Financial Institutions Examination Council (FFIEC) issued new guidelines requiring all Financial Institutions to set up stronger online banking security. Our new security standards will make it even safer for you to monitor and manage your account(s) while safeguarding against unauthorized access.

Q: How will using my phone make my WebBanking account safer?

A: We have implemented what is known as "multifactor authentication" which makes it more difficult for phishers and attackers to access your accounts without you knowing it. While this might seem unfamiliar, you actually use it every time you visit an ATM. When you access your account from any ATM, you need both your ATM card (something that you have) and PIN (something that you know).

With WebBanking, we're implementing the same type of protection by using both your password and your phone to access your account. By doing this, even if an attacker or a phisher manages to steal your password and tries to use it to log in to WebBanking, they would be unsuccessful because they would need your phone as well.

Q: What are the username and password requirements?

A: We will ensure that your login is as strong as it can be. This means that your username and password must be six or more characters long and a combination of both letters and numbers.

Q: How are access codes used?

A: We verify your identity by phone when you log in to WebBanking. After providing your username and password, you will be asked to provide up to two phone numbers where you (and/or a joint account owner) can immediately receive an access code via text and/or phone call. Cell phones or a phone number where you most often access WebBanking are recommended. We will immediately send an access code to your phone (via text and/or phone call) that you will enter into your computer to complete your login. You can opt to have this computer remembered, so you do not need to repeat this step each time you log in. However, you must obtain a new access code for each computer or mobile device you use to log in that is not remembered on the system.

Q: Can I change my Username if I don't like what I selected?

A: Yes, you can change your Username once you have logged into WebBanking in the "My Profile" section. Please remember to follow the Username criteria listed below.

  • Must be at least six characters long
  • Cannot be all numeric
  • Can contain letters, numbers and the following special characters: @$*_-=.!~
  • Cannot contain any whitespace (spaces are not allowed: including before, in the middle of, or after the username)

Q: Does my mobile carrier support delivery of the access code?

A: As of July 2012, the following carriers support the delivery of the one-time passcode through SMS:

  • ACG - NTELOS Wireless; Inc.
  • AT&T
  • Cincinnati Bell
  • T-Mobile
  • US Cellular Corp
  • Virgin Mobile USA
  • Boost Mobile
  • GetLisa
  • Nextel Communications
  • Sprint
  • Verizon Wireless
  • ACG - Carolina West Wireless
  • ACG - Cellcom
  • ACG - Cellular South
  • Cricket Communications
  • Google Voice
  • Interop - Appalachian Wireless
  • Interop - Bluegrass Cellular
  • Interop - Centennial Cellular Corp
  • Interop - GCI Comms aka Alaska DigiTel
  • Interop - Illinois Valley
  • Interop - Immix Wireless
  • Interop - Inland Cellular
  • Interop - Nex-Tech
  • Interop - United Wireless
  • Interop - West Central Cellular
  • Interop ECIT Cellular One of East Central
  • MetroPCS

If you choose to enable a phone for SMS capabilities, standard message and data rates may apply for usage, and the service must come from a supported carrier.

Q: Can an International phone number be used to verify my identity?

A: At this time International phone numbers can be used to receive an access code via a phone call only. Please contact Member Services if you have concerns relating to International phone numbers.

Q: Will I still be able to use WebBanking if I do not have a phone or access to the phone I set up?

A: Yes, during the set up process there is an option if you prefer to receive your access code by email.

While email is not a secure way to authenticate your log in, it is an option. Please contact Member Services if you have already set up your online security with a phone number and would like the option of using an email as well to receive your one time access code.

Q: Will I always need to use both my password and phone to access WebBanking from now on?

A: The first time you attempt to access WebBanking from a new computer, you will need to use both your password and the access code you receive on your phone in order to log in. If you are accessing WebBanking from a private computer that you personally use, you can opt for the system to remember your computer for future logins. (See the screen example below.)

By doing this, you will not need to repeat the step of obtaining an access code via phone, and you will only need your username and password in the future to log in.

For the best security protection, we suggest that you always use both your phone and your password to access WebBanking. If you do opt to have your computer remembered, we recommend that you do so only on computers that you personally own and that have the latest updates and virus protection software installed on them.

Q: How about if I log in from another computer?

A: The first time you log in from another computer, you will need to use both your password and a new phone access code to log in to WebBanking. However, you can choose to have your new computer remembered on the system so you only need your username and password for future access to your account online.

Q: I'm having trouble getting my access code from my voicemail?

A: Voicemail systems are different in respect to how you choose to listen to a message or skip to the next message. This can cause a conflict with the access code phone call prompt. It's recommended that you have the phone available to answer when requesting an access code.

Q: Does the access code expire?

A: The access Code for WebBanking is good for 15 minutes only, then it expires and you would need to request a new one.

Q: I'm having trouble getting to the WebBanking Login screen?

A: If you are using an older bookmark/favorite saved in your browser to access the WebBanking Login, please delete it. The best way to bookmark the WebBanking Login is to bookmark the homepage of Allegacy's website.

Q: How would I change the phone number?

A: Phone numbers can be changed within WebBanking under My Profile.

Q: It appears my WebBanking account is timing out quicker?

A: With the new Security Enhancements also came a shorter timeout period to prevent the risk of fraud.

If you are not interacting with the WebBanking home page/history page or with FinanceWorks your WebBanking session will be terminated after ten minutes. A timeout warning message will appear approximately one minute before the WebBanking session times out to allow you to renew your login for another ten minutes.

Q: How can I open WebPay or FinanceWorks in a new window?

A: By hovering over the link to WebPay or FinanceWorks, you can right click and choose to open it in a new window or tab.

Related Tools:

Allegacy is federally insured by NCUA and is an Equal Housing Lender. © 2017 Allegacy Federal Credit Union
Equal Housing Lender NCUA