Security of Your Information

Your Safety Comes First

Security is critical when it comes to financial transactions. Our first priority is to ensure the safety of your access and activity. To do that, we've utilized high-end firewalls and exclusive encryption software to prevent outside interference. In addition, when you log in to your NVB accounts, you will be asked to Set Security Data for Multi-Factor Authentication; an additional layer of security to our log-on process to help ensure that your information is protected. It will allow you to confirm that you are at the valid NVB online banking site and allow us to verify it really is you.

For your safety…

• Be sure to keep your password confidential
• Do not write your password down - memorize it!
• Use both letters and numbers (alphanumeric) in your password
• Change your password periodically

Ensure Your Browser Is Secure

The information - like login IDs and banking account numbers - you share with Web sites is only as safe as your Web browser. Before you use our Online Banking or Bill Pay services, use the free Browser Check to ensure you've got the latest, most secure Web browser. With one click, Browser Check instantly tells you:

• What browser and version you're using
• Your browser's encryption strength-standard 40-bit SSL, or 128-it SSL: the strongest encryption available
• Upgrade recommendations

Phishing: Avoid Becoming a Victim

Criminals are constantly improving their methods of stealing your personal financial information through fraudulent e-mails and Web sites designed to appear as though they were generated from legitimate businesses, financial institutions and even government agencies. This criminal activity is known as Phishing (pronounced "fishing"). They are literally fishing for your personal information. This information is money in their pocket.

Most legitamate financial institutions will never ask you to provide your user ID, password, account number, or Social Security number in response to an e-mail. Here are some additional tips to avoid taking the bait on a phishing attempt:

• Be suspicious of any e-mail with an urgent request for personal financial information.
  Do not open attachments or click links in unfamiliar e-mails, as they may place programs known as "keystroke loggers" on your computer.
• Avoid filling out forms contained in e-mail messages or in pop-ups that appear over a legitimate company's Web site.
• If you are uncertain about an e-mail that purports to be from a financial institution, contact that institution directly by your initiation to give any update to your confidential information.

This Brochure will educate you on these scams, provide suggestions on how to avoid becoming a victim, and provide information on steps to take should you become a victim of phishing.

Security Statement

This Internet Banking System brings together a combination of industry-approved security technologies to protect data for the bank and for you, our customer. It features password-controlled system entry, a VeriSign-issued Digital ID for the bank's server, Secure Sockets Layer (SSL) protocol for data encryption, and a router loaded with a firewall to regulate the inflow and outflow of server traffic.

Secure Access and Verifying User Authenticity

To begin a session with the bank's server the user must key in a Log-in ID and a password. Our system, the Internet Banking System, uses a "3 strikes and you're out" lock-out mechanism to deter users from repeated login attempts. After three unsuccessful login attempts, the system locks the user out, requiring either a designated wait period or a phone call to the bank to verify the password before re-entry into the system. Upon successful login, the Digital ID from VeriSign, the experts in digital identification certificates, authenticates the user's identity and establishes a secure session with that visitor.

Secure Data Transfer

Once the server session is established, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by VeriSign, data traveling between the user and the server is encrypted with Secure Sockets Layer (SSL) protocol. With SSL, data that travels between the bank and customer is encrypted and can only be decrypted with the public and private key pair. In short, the bank's server issues a public key to the end user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user makes a server session.

Router and Firewall

Requests must filter through a router and firewall before they are permitted to reach the server. A router, a piece of hardware, works in conjunction with the firewall, a piece of software, to block and direct traffic coming to the server. The configuration begins by disallowing all traffic and then opens holes only when necessary to process acceptable data requests, such as retrieving web pages or sending customer requests to the bank.

Using the above technologies, your Internet banking transactions are secure.

 Click here for more information about Verisign.