Introduction
In addition to employing the best security possible in the three main areas of security, including passwords, encryption, and firewalls, banks take other steps to enhance online banking security. This page is designed to show you what steps are routinely taken to protect your security.

Automatic log-off
Many banks will automatically log you out of your account if you don't use it for a set amount of time, usually five or ten minutes. This security measure is in place to make sure only you use your account. If you happen to step away, your account will not be open for hours to anyone who could come across your computer.

Using random password generation
Hackers can use brute force attacks (i.e. just submitting thousands of different passwords to try to randomly guess a password.) When your bank assigns you a password it should be a random string of letters and/or numbers. Most banks make sure that passwords are not easily guessed.

Three strikes lockout
If you give three wrong passwords, you will be locked out of your account for a period of time, usually an hour. This measure is to protect you from someone who is just guessing at your password.

Monitoring traffic
Without looking at actual transactions, banks can monitor activity on their computer system and thereby identify attempts to hack into the system.

Virus software
Individual consumers are not the only computer users who use virus software. Banks use similar software to prevent viruses from infiltrating or damaging their servers, insuring that records will be secure and services will not be interrupted.

Controlling who sees what
Banks set up their internal systems to limit the number of employees who have access to your data and allow them to access this data only when needed. Additionally, to insure accountability, many systems record who looks at what data and when.

Using hacker like techniques to test security
Internal teams or third party security professionals will try to break into a companies system using hacker techniques. This process insures that potential problems are identified by bank employees, and not those who would exploit them.