Tool #569 Online/Mobile/Text Banking VMS Config > Online Banking Password and Security Settings includes a setting labeled Expire stale passwords after xxx days of non-use . This means if a member does not log in within that period of time, they must answer all of their security questions in order to reactivate or change their password, before they can log in. The maximum allowed is 90 days, so a value 6 or 12 months is not currently allowed. Remember that this process expires the passwo  More...

Ever wondered just how many times members really do call up and ask that their online banking password be reset? Might seem like some members call every other day, but until now there wasn’t really an easy way to tell. The new PIN/Password Change History tool was designed to answer that question quickly and easily, whether for one member or for all members as a trend. When accessed via Tool #14 Member Personal Banker , you will see just a single member’s history, which should be hel  More...

There’s a chance that the email they received was forwarded by another member’s email account to theirs. To determine if it was forwarded to that member by another email address, the email headers can be analyzed to determine the route it took. Ask the Network Services help desk or your IT specialist for assistance examining email header information.

Access to personal information and other settings are now available by clicking the new profile button in the upper-right corner of the screen. These are the features included here: Message Center eAlert Subscriptions Personal Information (address, phone, email) Contact Preferences Change Username Change Password Change Security Questions Login History Password Change History

The Client Services Education team has the ability to shut down online/mobile banking access for all members. To be clear, this would not reset any passwords to respond to the security breach, it would simply take It's Me 247 completely off line so no one could access it.

The system will automatically generate an email any time an member's password is reset using the tools in CU*BASE (such as Tool #14 Member Personal Banker ) or in online banking by the member. This message is sent automatically to the email address already on file for the member. This is a security feature that is intended to warn members if someone else initiates a password change on their accounts without their knowledge. The content of the email reads as follows: If changed by a member in  More...

For a forced password change, the security table can be flooded with a forced password change status and the member would have to change their password the next time they log in. The hold password would remain in the system until the member updates their password. There is not an automated process for this on CU*BASE. A programmer will have to do this manually via a custom programming request. A custom request would need to be submitted and an estimate for leadtime will be provided at that time.  More...

First you will need to make some changes to your iSeries security settings. Contact the CU*Answers iSeries Administration team at iSeriesAdmin@cuanswers.com for assistance. We will also need to deploy a new CU*BASE login host screen onto your box. This does not require a CU*BASE GOLD update; once the host screen has been deployed then CU*BASE GOLD will automatically display a different panel to match the new host screen. A few tips to keep in mind: Warn all of your employees that once the chan  More...

This actually has to do with Gmail. Gmail doesn't necessarily care about periods. We verified this using some of our own personal Gmail accounts and received the message regardless of whether or not there is a period in it. In theory, it’s possible that this hasn’t always been true, and maybe these are legacy accounts, but if that is the case that is something with Gmail that we cannot control. There is an article on Google that goes more in depth about this issue with Gmail, see  More...

Yes, as long as they remember the old password they can change it themselves using Tool #40 Change Employee ID Password . NOTE: This is true for data center employee IDs as well, which can be changed either via Tool #40 or via OPER Tool #5431 (same tool, different access point). If they do not remember what the old password was, your credit union's security officer will need to first reset the password for them using Tool #762 Reset Employee ID Password . (This can also be done via To  More...

What This Message Means: This appears when the member has tried 3 times to enter their password incorrectly. The message does instruct the member to click I forgot my password and answer all three Security Questions to reset the password themselves. But if the member doesn't know their password or their security questions, they will need to contact the CU. BE CAREFUL: This is a scenario that presents the most risk to your members. If a bad guy finds out a member's name, account nu  More...

This procedure should be used if the member's password expired due to non-use. The error message the member will see reads: It has been more than xx days since you last logged into Online Banking . Your password has expired. Please contact the Credit Union to reactivate your password. (Click the Related Q A link below for instructions on what to do if the password was disabled due to invalid retries.) Launch Tool #72 Update ARU/Online Banking Access (PIN) (shortcut: PIN). Enter the memb  More...

When a Client Access print session is not configured correctly and is launched, the user name is already there and cannot be changed. This is caused by having the wrong connection options selected when configuring the session. To correct this, go into Start -> Programs -> IBM AS/400 Client Access -> Operations Navigator, right click the wescprod.cubase.org connection and choose properties. In the properties window, select connection and change the option for login to Prompt Every Time   More...

Members whose character-count fall below the new minimum required characters will have their online banking passwords reset, and upon their first login, will have to change their passwords to meet the new password minimum length.

No, you do not have to automatically activate OLB or ARU for new memberships. Actually, you can default all new memberships to deactivate online banking and/or audio response access until the member specifically requests it. This is highly recommended as it helps to protect members who join the credit union but never get around to using your online tools right away. These accounts may be your most vulnerable since the member hasn't set up a private password or security questions. By deact  More...

IMPORTANT NOTE: When It’s Me 247 was updated in 2021, the “See” option shown on here was made unavailable. There are two major points to consider when thinking about allowing members to see information beyond the account to which they are actually logged in. Both extend beyond online banking to consider a financial institution’s role and responsibility in protecting member private data via all access channels, from the teller line to a back office employee answering   More...

There is nothing CU*Answers can do to stop financial aggregation services like Mint from accessing our online banking products. Although we have set up many direct integration tools over the years (see the related links), members can also provide their credentials to whomever they choose and the process is entirely in the hands of that third party to maintain the connectivity. Hint: Members who choose to do this will need to remember that whenever they change their online banking password, they&  More...

There are a couple of access points: Launch Tool #14 Member Personal Banker and select the Online banking/ARU (activate, change PIN/password; view password history) option OR Launch Tool #72 Update ARU/Online Banking Access (PIN) (Shortcut: PIN) It's Me 247 CU*TALK CUTalk

Here is one way to make sure that MACO is unenrolled from all devices that have been enrolled using this particular account: Step 1: In case credentials have been compromised, have the member change their password, then enroll for MACO Step 2: If the member sees the message, “Previous Enrollment Found,” that indicates that another device has, in fact, enrolled with MACO. (Less commonly, this message could also mean that the member had previously enrolled but hit “Reset All  More...

Here are some ideas of things to remind members: If an online banking username was set up, the account number can no longer be used to log into the account. (If the member cannot remember the username they set up, after verifying their identity use Tool #14 Member Personal Banker > Online Banking/ARU (activate, change PIN/password; view password history) > Display Username to delete the username. Your member number is the main account number that identifies your relationship with the cred  More...

The concern that's usually raised is that the temporary password should be randomly and procedurally generated rather than be static. CU*Answers believes the risk of security breach due to a static password is quite low due to the compensating controls we have around CU*BASE Security, including: A requirement that a person must have access to the network and to a PC with the CU*BASE software installed. The person would have to know the user ID. The person would also need to have the separa  More...

Using a link to the standard login pages provides much more than just the ability to log in: The I forgot my password link that allows them to reset their password online They have to set up the Security Questions anyway; why not give them a place to use them to help themselves if they forget their password? The Apply for Membership link to capture membership applications and work them right from CU*BASE (no rekeying!) Why would you not allow every possible opportunity for someone to say th  More...

The member will see some new information on the Login History screen starting August 29, 2018. The data for this change was collected beginning August 7th. New information includes: Login Source types: iOS, Android, Desktop Browser, Mobile Browser, Loan Application, Other Login Methods: Username Password, Fingerprint, Pin, Voice, Face NOTE: If a member uses Personal Internet Branch (PIB) device registration, a duplicate login record might appear that doesn’t record the login source, IP  More...

To see the member's username, go into Member Inquiry or Phone Operator and click the Online Banking button. Then click the Display Username button. Just like if a member forgot their account number, you'll want to follow your normal procedures for verifying the person's identity before disclosing the username. Or if you wish, you can clear the username entirely by choosing the option to change the member's password Tool #14 Member Personal Banker. Then use the Display Usern  More...

Log in to the Help Desk Portal Navigate to https://cuanswers.myportallogin.com . If you already have an account, click Sign in. Enter your email and password. Click Login to be directed to the Home page (shown below). If this is your first time logging in, click Sign up. Enter your information below. Click Sign Up. You will receive an email to verify your account. Once confirmed and logged in, you will be directed to the Home page (shown below). Log Out When you are finished using the Customer  More...