When managing your financial affairs online,
security is a critical and important issue. That's why Heritage is a member of AusCERT, the Internet security body. The Heritage internet banking software has been developed with a view to keeping the amount of data requested by you from our host computer to the absolute minimum.
View our security and password tips.
Security Updates
If you ever suspect any unusual activity when using Heritage internet banking, we would encourage you to call our Contact Centre on 131422 (8:30 am - 7 pm Mon-Sat), or via e-mail to fraudalert@heritage.com.au.
You can also learn more about current fraudulent activity at SCAMwatch. This is a website run by the Australian Competition and Consumer Commission (ACCC) to help you recognise, report and protect yourself from scams.
View the latest security alerts and updates.
Communication Links
The Web Server uses Secure Sockets Layer (SSL) – a public/private key based encryption system that enables us to secure all packets of information transferred between the Web Server’s secured directories and the members PC over the Internet. The encryption is both ways i.e. packets generated by the Server and packets generated by the Client (member) are encrypted.
Strong Encryption
Encryption is the conversion of data into a form that cannot be easily intercepted by unauthorized people. Its purpose is to ensure privacy by keeping the information hidden from anyone for whom it is not intended (even those who can see the encrypted data). Encryption is based on complex mathematics. When you send and receive data from a secure site (https) you can be assured all communications are encrypted. Heritage internet banking uses security software with 128-bit encryption.
Heritage Internet Banking Security and Safety Features Include:
- Browser login page encryption
- Password Anonymity Member chosen passwords
- Passwords encoded with one way algorithm
- Password control from host (Not web server)
- Passwords can be a variable length between 5 and 12 characters
- Separate Pay Anyone password
- Automatic lockout after multiple failed login attempts
- Virtual keyboard to aid in prevention of the capture of your password
- Users can change their password at anytime
- Passwords are not displayed on screen
- The initial password must be changed on the first use of Heritage internet banking
- Alphabetic and numeric characters are allowed in the password
- Login page unable to be cached
- Login page refreshed whenever called
- Timeouts for inactivity when session open (10 minutes)
- 128 bit SSL encryption of data
- System lock out if browser unable to support encryption
- Host system security
- Daily funds transfer limits
- Daily BPay limits to financial institutions
- Ability to disable BPay and or Funds Transfer
- View session history
- A return confirmation e-mail is sent on all balance altering transactions
Heritage mobile banking security
Heritage mobile banking is designed to be quick and easy to use on the much smaller screens and interfaces available on the wide variety of mobile devices in the market. Even though it contains fewer features, Heritage mobile banking deploys many of the same security features as the regular Heritage internet banking application. Your funds are covered by the same protection offered for internet banking as long as you abide by the terms and conditions of use.
Heritage mobile banking provides an easy to use interface for many common banking functions and still includes security features such as the password storage using a one way algorithm, automatic lockout after multiple failed login attempts, inactivity timeouts, 128bit SSL encryption and more. The same protective daily limits for transfers and BPAY that you have established for Heritage internet banking will continue to apply in mobile banking, as do confirmation emails and SMS alerts/emails.
Pay Anyone functions are not available on Mobile Banking, you will need to use the access the full version of internet banking to add new payees or complete a nomination form.
Safety tips
Don’t store your member numbers or passwords anywhere in your mobile device or in the browser of your mobile device. It is good practice to regularly clear the cache on your phone’s browser and clear or disable stored inputs if available. If someone other than you accesses your phone, you do not want them having these details freely available to them.
Where possible, you should keep your mobile device’s system and application software up to date and if possible run security software if it is available.