SMS two-factor Authentication and Verification

On Monday, December 5^th, Online banking and the Mobile app will offer you the option to receive a one time passcode (OTP) to your mobile device instead of selecting images for additional security with two-factor authentication.

Two-factor authentication requires you to have two things to get into your account: something you know (your password) and something you have (an additional security code from your mobile device or a physical token).

When you enable SMS-based two-factor authentication, the service will send your mobile phone number a text message containing a one-time code whenever you sign in from a new device (i.e. unrecognized).

This means that even if someone has your username and password for that account, they will not be able to sign in without access to your text messages from an unrecognized device.

When you enable SMS-based two-factor authentication in Online Banking for the first time or from a new device, you will see the following prompt.

If you select “Get Code By Text” you will see the following message:

If you select “Get Code By Email” you will see the following:

When you select SMS as your authentication method, a text message with a five-digit passcode is sent to your device. Each passcode can be used only once.  You will receive something similar to the following message:

FAQ

Is SMS secure?

SMS verification is more secure than passwords alone. While passwords can easily be stolen, SMS verification requires a hacker to have access to your username, password AND your phone before accessing your data.

What do I do if I haven’t received my SMS verification code?

First, make sure that you have a strong cell phone signal—that’s the most common culprit. Next, confirm your account has the correct phone number associated with it. Please reach out to us during business hours to update your account information. Lastly, ensure your mobile provider isn’t blocking messages from certain senders or number types.