1. Where is the text box for my password?
  2. What is SafeKeys?
  3. Why do I need SafeKeys?
  4. How do SafeKeys work?
  5. How are SafeKeys more secure?
  6. What keeps somebody from stealing my SafeKeys?
  7. Why am I being asked a Challenge Question when I try to log-in?
  8. How do you know I am logging in from my own computer?
  9. Can I access my account from multiple computers?
  10. I share my computer with someone who has their own Ally account. Can both of us still log-in from this machine?
  11. What happens if someone steals my password? How will SafeKeys keep them from accessing my account?
  12. Can I change my SafeKeys?
  13. What is Phishing?
  14. I am trying to log-in from my own computer, but the Ally web site is not showing me my SafeKeys. Instead, it is asking me a question. What is happening?
  15. What is Trojan or Key Logger?
  16. How do SafeKeys protect me from a Trojan or Key Logger?
1. Where is the text box for my password?
Your online password will now be entered on a subsequent page following the entry of your Username. This change was required due to the implementation of an enhanced online security feature called SafeKeys. Please enter your Username and click "Continue" and you will go to the next page, where you will find the text box for your password.
2. What is SafeKeys?
SafeKeys is an enhanced security feature that helps protect you while you access your on-line account. SafeKeys is a picture and phrase that is a shared secret between you and Ally Bank. Your SafeKeys will be presented to you each time you logon to Ally Bank so you can be confident that you are at the legitimate Ally Bank web site, not an imposter site.
3. Why do I need SafeKeys?
SafeKeys provides you added safety by helping ensure that only you can access your bank account. On the Internet today, fraudsters attempt to steal your identity by impersonating the web sites you trust. Ally Bank is committed to proactively protecting you, our customer, against such attacks. Your SafeKeys helps us to do this.
4. How do SafeKeys work?
When you login for the first time following the implementation of this security feature, you will select your SafeKeys which will consist of a secret image and phrase known only to you. Whenever you log-in we will show you this picture and phrase so you can rest assured that you are accessing the real Ally Bank site and not an imposter site.
You will also be able to register the computer(s) or device(s) that you use to access the web site. This information will be remembered by assigning a unique identifier to each computer you use to access our web site. Should you need to log-in from a different computer, such as an Internet café, additional steps will be taken to verify your identity, such as ask you to provide the answer to a Challenge Question which only you would know.
5. How are SafeKeys more secure?
SafeKeys protect you from accidentally revealing your username and password to an imposter site. In addition, if someone does somehow get your username and password, they will still not be able to access your account because they are not at your registered computer(s).
6. What keeps somebody from stealing my SafeKeys?
Your SafeKeys image and phrase will only be shown to you if you log-in from your registered computer(s), or after you have answered a Challenge Question. Therefore, it is not possible for an unauthorized person to gain access to your SafeKeys picture.
7. Why am I being asked a Challenge Question when I try to log-in?
You will be asked a Challenge Question when it is detected that you are trying to log-in from an unregistered computer. This is to prevent someone with stolen passwords from logging into your account. Since only you know the answer to the questions, we will know it's really you. Generally you will be asked to answer a Challenge Question only when you log-in for the first time from an unregistered computer.
After you answer the question, you will be asked whether this computer should be registered for future log-ins. If you are using a personal computer, you should answer yes. If you are using a public terminal, you should answer no.
8. How do you know I am logging in from my own computer?
When you log-in for the first time from an unregistered computer, we put a secure (encrypted) cookie on your computer. This cookie contains a randomly generated unique number that identifies your computer. The cookie is visible only to the Ally Bank web site and does not contain any of your personal information. When you log-in after that, your web browser sends us this cookie. This lets us know that this is your computer.
9. Can I access my account from multiple computers?
Yes, you can still access your Ally Bank account from any number of computers. If you log-in from an unregistered computer or a public terminal, you will just need to go through one extra step of answering a Challenge Question. This helps protect you by keeping unauthorized people from accessing your valuable information. There is no limit on how many different computers you can use to log-in to your Ally Bank account.
10. I share my computer with someone who has their own Ally Bank account. Can both of us still log-in from this machine?
Yes, you can both use the same computer to log-in to your individual Ally Bank accounts. There is no limit on how many people can log-in into the Ally Bank web site from the same computer.
11. What happens if someone steals my password? How will SafeKeys keep them from accessing my account?
When someone tries to log-in using your stolen username and password, we will recognize that they are logging in from a different computer, and ask them a Challenge Question. Since only you know the answers to your Challenge Questions, they will not be able to give a correct answer. Therefore, they will not be able to log-in.
12. Can I change my SafeKeys?
Yes, you can change your SafeKeys image, phrase, or Challenge Questions/Answers at any time. To make the change, go to the Customer Profile menu option on the left-hand navigation menu and select SafeKeys Management. From there, choose the Image and Phrase option or the Challenge Questions and Answers option.
13. What is Phishing?
Recently there have been attempts by fraudsters to trick people into revealing their personal information, such as passwords, by creating fake web sites that look very much like the sites of legitimate financial institutions. These fraudsters send out emails randomly with links to fake web sites, this phenomenon has been called Phishing, (pronounced "fishing").
14. I am trying to log-in from my own computer, but the Ally Bank web site is not showing me my SafeKeys. Instead, it is asking me a question. What is happening?
This might happen in rare case if you have deleted all cookies on your computer. Before answering a Challenge Question or entering your password, make sure that you are going to the legitimate Ally Bank web site. The easiest way to ensure this is by typing the URL for Ally Bank (https://www.ally.com/) directly into your web browser. Then, after you answer the security question, you should see your secret SafeKeys image and phrase next to the password. If your SafeKeys are there, you can be confident that you are at the legitimate web site and can enter your password. If you are still uncertain if this is the legitimate Ally Bank web site, contact Customer Care at 1-877-247-ALLY (2559) for assistance 24 hours a day 7 days a week.
15. What is Trojan or Key Logger?
Some fraudsters have been putting programs on random computers in order to harvest your username and password information used to log-in to web sites. They collect this information and secretly transmit it to their own computers and attempt to log-in to your site. These are called Trojans (short for Trojan Horse) or Key Loggers (for logging your keystrokes).
16. How do SafeKeys protect me from a Trojan or Key Logger?
Once you have SafeKeys and have registered your computer, even if a fraudster steals your Login ID and Password, their computer will not be registered and they will not be able to log-in as you; thus, SafeKeys protect your identity and your account.