Security
We are very aware that security is a key issue for people who do any type of transactions over the internet.
Security is also important to us. On this page you can find information on how you can use and manage My accounts and the internet safely and securely:
Security features about our site
We use 128-bit secure encryption through a secure socket layer. This is the Internet standard for the secure transmission of data. When you log in the browser window will become secure to protect your information. You know this window is secure because your browser will show a padlock or key at the bottom right hand side of your screen.
If the pages are inactive (by this we mean you choose not to select any of the buttons or links on the page) for longer than 10 minutes we will log you out of this area for your security. We will however advise you when you are approaching the 10 minute point.
If you have chosen the accessible option for logging in we won't be able to warn you that the time out is approaching. If you are timed out you have the option of returning to the My accounts page to log in.
Suitable browsers
We have recently enhanced the My accounts service and for security and usability reasons we are no longer able to provide support for older Netscape and Internet Explorer versions. We therefore recommend that you download the latest available version of the browsers below.
The following links open in a new browser window:
- Microsoft Internet Explorer 6.0 or higher
- Netscape 7.1 or higher
- Mozilla 1.7 or higher
- America Online 8.0 or higher
Phishing / Email scams
The customers of several UK banks have recently been targeted by fraudsters. They have been sent bogus emails requesting that they provide their Internet banking security details in order to reactivate their account, credit card numbers, verify an email address. Phishers attack trusted banks' and retailers' names to make users believe they are genuine, and then fraudulently use your name and the stolen information.
We would recommend that you be on your guard against emails asking for information like this. Tesco Personal Finance will never ask you to reveal your security details via email, and you should never reveal your full PIN or Password to anyone.
The Anti-Phishing Working Group (new window) offers practical advice on avoiding getting caught out.
Registering for our online service
If you want to use the online service to view and manage your accounts, we will ask you to register. Registration for our online service will take a few days and it is a 2-step process.
You will complete the first step immediately and the second step a few days later, once we have checked some details such as your address and signature.
The first time that you access your accounts online, after registration, we may ask you to confirm some details or to change your password. This is a part of our security process.
You may feel that registration is a rather long-winded process, but we'd like to ask for your patience, as it is very important to get this right, to protect your personal financial information.
Once you've registered, the logging in process is very simple and quick. So it's really only the initial registration that takes a bit of time, but we're sure that you'll agree that it is important.
Keeping your security details secret
If you think that someone may know your security details, please call us on 0845 6000 873.
Passwords
Once you have registered, please remember your security details and keep them secret. This is extremely important. Remembering your security details:
If you try to log-in and your security details are wrong, you can usually try again. However, we have to limit the number of times you can try. If you exceed this limit, we will need to ask you to go through the registration process again.
Logging Out
Once you have logged in to our site, the 'register & login' tab at the top of the page will change to 'logout'. Please remember to click this tab when you are finished. This will ensure you are properly and securely logged out. If you are using a PC which could be used by someone else, (eg: in an Internet Cafe) we also recommend you also close your Internet browser.
If you login and your PC is inactive for 10 minutes, you will be automatically logged out for security.
Time out
A time out is where we automatically log out if your PC has been inactive for 10 minutes. This is a security measure put in place to help protect your financial information in case you accidentally leave your PC unattended, especially in a public place (e.g. work or an Internet Cafe).
Software updates
Most computers' operating systems have small security loopholes that developers identify and fix over time. It is important to keep yours up-to-date with the latest patches released by the manufacturers. If you are running a Windows system you should visit the Microsoft security site (new window), Mac users visit the Apple site (new window).
Trojans and Spyware
"Trojans" or "Spyware" are used by fraudsters to secretly record what you do on the internet, like online banking passwords and credit card numbers. If you receive message or prompts for security details when you visit certain websites your PC could be infected. To find out, visit the Microsoft security site (new window).
We would reassure you that if you have any concerns about these or other matters relating to internet security, you can call our Helpdesk on 0845 6000 873 (Calls may be recorded).
Further security
We take security very seriously and we use one of the strongest available security systems to protect your communications with us. Whenever you fill in a form, such as a request for a quote, it is automatically protected using something called a Secure Socket Layer (SSL) between your computer and ours. SSL works in the following ways:
- It prevents impersonation - you can tell that you are using a genuine SSL site by the padlock symbol at the bottom of the screen. Clicking on either the padlock or the image opposite will reveal our Registration Certificate that is issued by Verisign, a leading Internet security company.*
- It encrypts data - as soon as your computer has recognised our computer they encrypt all information that is passed between them. Data encryption means that no one else can read or change your information as it travels over the Internet.
- It prevents scrambling - SSL uses a Message Authentication Code (MAC) to prevent anyone tampering with our Internet site. Your computer will always check this code before it takes a message from us. This means that if anyone tried to interfere with a message, your computer would not recognise the code and would alert you.
*There are two minor problems with Microsoft Internet Explorer. Neither problem has any effect on the actual security in force, but may make it appear to you as if it is not fully secure. Internet Explorer 4. The padlock symbol does not always appear at the bottom when it should. A full description of this error, number Q154621, is at http://support.microsoft.com/kb/q154621/ (new window) Internet Explorer 5. If you click on the padlock symbol to view the security certificate the following message may be displayed: This certificate has failed to verify for all of its intended purposes. The other details of the certificate shown are correct. A full description of this error, number Q233479, is at http://support.microsoft.com/kb/q233479/ (new window)
