Online Safety
Practical steps you can take to protect your personal information and bank safely online, wherever you are.
Password Best Practices
Your password is the first line of defense against unauthorized access to your account. Follow these guidelines to create and manage strong passwords.
Create Strong Passwords
Use at least 12 characters mixing uppercase letters, lowercase letters, numbers, and special symbols. Avoid using names, birthdates, or common words. A passphrase — a sequence of random words — is both strong and memorable.
Change Passwords Regularly
Update your banking password every 60 to 90 days. Avoid reusing old passwords or making small predictable changes like incrementing a number at the end.
Never Reuse Passwords
Use a unique password for your banking account that you do not use anywhere else. If another service is breached, reused passwords put your bank account at risk.
Use a Password Manager
A reputable password manager can generate and store complex unique passwords for every account. This is far safer than writing passwords down or reusing the same one across services.
Device Safety
The device you use to access online banking matters. Whether it is your personal computer, tablet, or smartphone, follow these steps to keep it secure.
Install Antivirus Software
Use reputable antivirus and anti-malware software on all devices you use for banking. Keep the software updated and run regular scans to detect threats before they compromise your data.
Keep Your Operating System Updated
Enable automatic updates for your operating system, browser, and apps. Security patches fix known vulnerabilities that attackers exploit to gain access to your device.
Lock Your Screen
Set up a screen lock with a strong PIN, password, or biometric authentication on all your devices. Never leave your device unlocked and unattended, especially when you are logged into your bank account.
Safe Browsing Tips
When accessing your bank account online, how you browse matters as much as where. Follow these practices to ensure you are on a genuine, secure connection.
Always Type the Address
Type www.dbhacu.com directly into your browser's address bar. Never reach the login page through a link in an email, text message, or search engine result. Bookmark the official address for convenience.
Check for the Padlock
Before entering any credentials, verify that the address bar shows a padlock icon and that the URL begins with https://. This confirms your connection to the website is encrypted and secure.
Always Log Out
When you finish your banking session, always click the Log Out button. Do not simply close the browser tab. This is especially important on shared or public computers, but it is a good habit even on your personal device.
Clear Your Browser Cache
Periodically clear your browser history, cache, and cookies. This removes stored data that could be accessed if your device is compromised. Most browsers allow you to clear data from the privacy settings menu.
Public Wi-Fi and Banking Don't Mix
Public Wi-Fi networks are convenient but inherently insecure. Here is why you should avoid them for banking and what to use instead:
Risks of Public Wi-Fi
- Your data can be intercepted by anyone on the same network using readily available tools
- Fake Wi-Fi hotspots with legitimate-sounding names (like "Free Airport Wi-Fi") may be set up by attackers
- Even password-protected public networks may not encrypt individual user traffic
- Man-in-the-middle attacks can redirect you to fake banking websites without your knowledge
Safer Alternatives
- Use your mobile phone's cellular data connection instead of public Wi-Fi for banking
- If you must use public Wi-Fi, always connect through a reputable VPN service that encrypts all your traffic
- Consider using your phone as a personal hotspot for your laptop when travelling
- Wait until you are on a trusted, private network before accessing your bank account
Recognising Secure Websites
Before entering any personal or financial information on any website, verify these security indicators:
HTTPS and the Padlock
The address must start with https:// — the 's' stands for secure. A closed padlock icon in the address bar confirms the connection is encrypted. If the padlock is missing or shows a warning, do not proceed.
Valid Security Certificate
Click the padlock icon to view the site's security certificate. It should be issued to Whitestone Trust Credit Union and be currently valid. Browser warnings about invalid certificates should never be ignored.
Check the URL Carefully
Verify that the domain is exactly www.dbhacu.com. Scammers create look-alike domains with subtle misspellings such as dbhacu-secure.com or dbhacu-login.com. If anything looks off, close the page immediately.
Your Security Is a Partnership
We provide robust security — you provide vigilance. Together, we keep your account safe.