Bank of America introduces USB security key registration for online transfers (2024)

Bank of America has a longstanding history in the support of authentication for the online banking experience.

They were one of the first major banks to join the FIDO Alliance and be appointed to its board in 2014. In 2016, they championed, alongside Yubico and several others, the launch of the “Lock Down Your Login” public awareness campaign designed to enable every American to better secure their online accounts through the use of strong authentication.

While there have been many milestones over the last decade, today marks a true ‘security step up’ for online banking account sign-in and bank transfer protection for many Bank of America customers. Bank of America has announced that they are replacing SafePass with the new Secured Transfer feature, which allows for USB security key registration and transfer authentication with YubiKeys. They have also provided the option for many Bank of America customers to sign-in to their online banking account with a USB security key.

Bank of America’s SafePass theft protection was originally introduced to provide individual, small business, and brokerage customers with an extra layer of security against unauthorized transactions. Previously, SafePass only allowed for one-time code mobile authentication or via SafePass Cards. Bank of America’s advancement to the Secured Transfer feature builds off of this foundation by introducing the option for more secure, FIDO-based hardware authentication.

Many Bank of America online banking users that have a YubiKey, can now register their security key for account sign-in two-factor authentication (2FA) as well as setting up the Secured Transfer feature to add an extra layer of physical security to their online account. If you are a Bank of America customer and do not have a YubiKey, you should consider increasing your security posture with a YubiKey.

How to set up your YubiKey for Secured Transfer and online banking sign in:

Log-in to your online Bank of America account using your username and password;
Once logged in, go to “Profile & Settings” in the top right corner, and under “Security settings” click on “Manage SafePass”;
Depending on your type of account and/or account settings, you should see the option to add a USB Security Key, as well as enable Secured Transfer.

Once your USB security key is set up, when signing in to your online account or executing a bank transfer, you will be prompted to touch your YubiKey.

When touched, the YubiKey executes a public key cryptographic exchange with the bank’s online service that verifies that you and only you are in possession of the security key thus allowing for secure sign-in and the bank transfer to occur. If your password login credentials are stolen or compromised, you will still be protected because a physical YubiKey is required for 2FA. Furthermore, once your YubiKey is linked to your account, it also serves as step-up security for adding transfer recipients to your account.

Bank of America introduces USB security key registration for online transfers (2024)

FAQs

Bank of America introduces USB security key registration for online transfers? ›

What is a USB security key? A USB security key plugs into your computer's USB port and functions as an extra layer of security that's used in Online Banking to increase limits for certain transfer types.

How do I find my USB security key Bank of America? ›

Bank of America USB Security Key Experience
  1. Step 1: After logging into your account, select Profile & Settings -> Manage SafePass.
  2. Step 2: Click Add button from the Security Center page.
  3. Step 3: You will be sent Authorization Code via Text Message or Call to your phone when you click SEND CODE button.

What is a USB security key Bank of America? ›

What is a USB security key? A USB security key plugs into your computer's USB port and functions as an extra layer of security that's used in Online Banking to increase limits for certain transfer types.

Can I use YubiKey with Bank of America? ›

To set up your YubiKey for Secured Transfer and online banking log-in to your online Bank of America account, go to “Profile & Settings” in the top right corner, and under “Security settings” click on “Manage SafePass”, there you should see the option to add a USB Security Key.

How do I create a USB security key? ›

To set up a USB security key, you need a USB drive and a USB security key app. You install the app on your computer, set it up, and then use it to create your USB security key. Whenever your computer is on, the app constantly scans your USB ports for a device that contains a specific encrypted file.

How to manually activate securitycode Bank of America portal? ›

From the self-service homepage https://safepass.bankofamerica.com/sasuser/Home.do, select Test Token from the Operations drop-down menu. Enter the information requested on the page and hit Submit. You will receive a confirmation message regarding the result of the token test.

How do I access my USB key? ›

Use USB storage devices
  1. Connect a USB storage device to your Android device.
  2. On your Android device, open Files by Google .
  3. At the bottom, tap Browse. . ...
  4. Tap the storage device you want to open. Allow.
  5. To find files, scroll to "Storage devices" and tap your USB storage device.

How do I disable USB security key? ›

Stop using a security key
  1. Go to the 2-Step Verification section of your Google Account. You may need to sign in.
  2. Next to the key you want to remove, select edit .
  3. Select Remove This Key. OK.

What websites use USB security key? ›

Many sites support U2F security keys, including Twitter, Facebook, Google, Instagram, GitHub, Dropbox, Electronic Arts, Epic Games, Microsoft account services, Nintendo, Okta, and Reddit.

What is a digital secure key for Online Banking? ›

A Digital Secure Key is an extra layer of security for your bank account, which lets us know it's really you that's accessing your account.

Is a security key the same as a USB? ›

A security key is a physical USB drive that connects with your devices, including computers and laptops, to prove identity to access specific resources on a network.

What happens if you lose your USB security key? ›

What happens if you lose your security key? Security keys are not a replacement for your password. If your key is lost or stolen, the person in possession of your key will not be able to log into your account without also knowing your username and password.

Does Bank of America have authenticator? ›

Yes. You have the option to add extra security to help verify your identify with a one-time authorization code, which is sent by textFootnote or email each time you log in.

What accounts accept YubiKey? ›

Using a Microsoft account with a YubiKey gives you quick and easy access to services such as Outlook.com, Office, Skype, OneDrive, Xbox Live, Bing and more. Just tap your YubiKey and you're in. No password required.

Can I use my phone as a USB security key? ›

If your phone is eligible, Google will automatically use your phone's built-in security key for additional protection when you sign in to new devices. Important: You can only have one built-in security key on your account. If you have more than one eligible phone, you'll need to choose one.

Can a normal USB be used as security key? ›

You can buy one from a few different vendors, including Google, YubiKey, and Thetis. You can also make one on your own (turning a USB flash drive into a security key). Honestly, making a USB security key is not complicate and you can do that with ease.

Can I make my own YubiKey? ›

Program your own YubiKeys

The YubiKey Personalization Tool works on Microsoft Windows, Linux, and Mac computers, and can be used to configure single or multiple YubiKeys.

Why is Bank of America unable to authenticate me? ›

It's possible you're using a password manager or your browser has stored credentials that are no longer valid. While Bank of America can't prevent your browser from storing credentials, deleting your stored credentials should enable you to access your account.

How do I activate my Bank of America authenticator? ›

From the self-service homepage https://safepass.bankofamerica.com/sasuser/Home.do, select Activate Token from the Operations drop-down menu. Enter the information requested on the page and hit Submit. You will receive a confirmation message regarding the updated status of the token.

What is the security code of Bank of America? ›

How to find your 3- or 4- digit security code. Your 3-digit security code is printed on the back of your card. Look for the last 3 numbers in the signature line.

Why does my USB key not show up? ›

Right-click on My Computer and select Manage. Click on Disk Management and look for the drive in the lower pane on the right. If it is there, right click on it and select Change Drive Letter, follow the steps to assign a new drive letter, and then check My Computer for the removable drive again.

Why is my USB key not working? ›

USB driver issues, drive letter conflicts, file system errors, etc., may all cause your USB flash drive not showing up on Windows PC. You can update the USB driver, reinstall the disk driver, recover USB data, change the USB drive letters, and format the USB to reset its file system.

How does a USB key work? ›

The chip inside contains a grid of transistors acting like tiny switches. All data is reduced to binary 1s and 0s and one of these values is stored at each point in the memory. To store a '1', the transistor in the relevant location is switched on, allowing charge to flow through it.

Are security keys a good idea? ›

If used correctly, it can provide you with an extra layer of protection against phishing, social-engineering scams, and many other cyberattacks. The idea is that even if a hacker does know your password, they can't access your account without also having access to the physical key.

How do I make sure my Online Banking is secure? ›

6 Ways To Secure Online Banking
  1. Choose strong and unique passwords.
  2. Enable two-factor authentication.
  3. Steer clear of public Wi-Fi.
  4. Sign up for banking alerts.
  5. Be wary of phishing scams.
  6. Choose trustworthy financial apps.
Apr 19, 2023

How do I make an online transaction secure? ›

Secure online payment methods
  1. Credit cards. By and large, credit cards are easily the most secure and safe payment method to use when you shop online. ...
  2. ACH payments. ...
  3. Stored payment credentials. ...
  4. Credit cards with EMV chip technology. ...
  5. Credit cards with contactless payment. ...
  6. Payment apps.
Feb 11, 2023

Should I allow digital secure? ›

Digital secure is one of the best privacy tools for smartphones to shield them from security threats. You can safeguard your smartphone from ongoing security threats, whether it's the web, identity theft, phishing, or any severe malware attack.

How do I know if my key is a security key? ›

True security keys are 'Patent Protected' and will have this embossed on the key itself, with the words 'Do Not Duplicate' - they need both to be true! Do Not Duplicate' on its own means nothing....

How do I know if I have a security key? ›

You can find your network security key through the Wi-Fi settings on your Windows or Mac device. You can also find the default Wi-Fi key on the back of the router or by accessing the network's configuration page through your browser.

Can someone use a stolen YubiKey? ›

If you lose your Yubikey, you can still use your phone authenticator app, but you cannot create a backup Yubikey. However, Yubikey also provides methods to recover your account, so you can get a replacement. An advantage to Yubikey is that it comes on a USB that cannot be identified.

Why don t banks use Authenticator app? ›

There could be several reasons why some banks have not implemented 2FA as a security measure for their customers' online banking accounts. One reason could be the cost of implementing and maintaining such a system. Banks must invest in new technology and infrastructure to support 2FA, which requires resources.

Why do USB keys present a security risk? ›

Malicious USB drives contain pre-programmed malware programs that allow attackers to access the victim's peripheral devices, including the keyboard, gain access to a network and move laterally to other computer systems, steal proprietary data, and spy on the organization's network activities.

Is it safe to use Bank of America Online Banking? ›

Our Online and Mobile Banking Security Guarantee helps provide protection against fraudulent Online Banking transactions, secures your financial information and covers the timely processing of your payments. Using Zelle in our Mobile Banking app is a fast and efficient way to send money to family and friends.

How to turn off two factor authentication Bank of America app? ›

To get started, log into online banking.
  1. Select Customer service at the top of the page, then choose My profile.
  2. Choose Edit Login & security.
  3. Scroll down to the "Security" section. For two-step verification, select the toggle switch to turn it off or on.

Can I verify my identity for Bank of America Online? ›

Verify your identity in the app now to Log In to Online Banking. If you're enrolled in this security feature, we sent a notification to your registered device. Verify your identity in the app now to Log In to Online Banking.

How do I make an online transfer with Bank of America? ›

To perform a transfer, sign in to your account and select Transfers from the navigation menu. You'll need to know the account number and transit routing number of the recipient.

What is the maximum amount I can transfer from Bank of America? ›

B. Transfers to Someone Else Using Their Account Number
Transfer FromTransfer To$ Limit1
Your Checking/Savings accountChecking/Savings account of Someone Else$3,500 per 24 hours $10,000 per week
Feb 27, 2023

How much can you wire transfer from Bank of America secured transfer? ›

It takes numerous steps to initiate a wire transfer online. Wire transfers can't be done on the Bank of America app. For consumers, wire transfers are limited to $1,000 per transaction. The per-transaction limit for small businesses is $5,000.

Should I use YubiKey and authenticator? ›

Authenticator apps provide a layer of security and are a convenient option for use by many, but they are still vulnerable to phishing due to the 30-second window. Security keys, like the YubiKey, are considered to be both more convenient and more secure. Yubico also provides a use in conjunction with the YubiKey.

Is YubiKey the same as Google Authenticator? ›

You can use Yubico Authenticator, which is similar to Google Authenticator. We have created both a desktop and mobile version of this app for you to use so you can use it on a Windows, Mac, Linux, or Android.

What is the purpose of YubiKey? ›

The YubiKey enables smart card authentication

The YubiKey allows three different protocols to be used simultaneously – PIV, as defined by the NIST standard for authentication; OpenPGP for encryption, decryption, and signing; and OATH, for client apps like Yubico Authenticator.

How do I access my security key? ›

Finding a network security key on a Windows device
  1. Go to the Start menu.
  2. Click Network Connection.
  3. Select Network and Sharing Center.
  4. Click on the wireless network icon.
  5. Go to Wireless Properties.
  6. Open the Security tab.
  7. Select Show Characters, and you'll be able to see your network security key.
Apr 24, 2023

How do I activate my security bank card? ›

Activating your credit card just got easier via SMS. Simply text the following using your registered mobile number: SBCARDS[space]ACTIVATE[space]Birthdate(mmddyy)/ExpiryDate(mmyy)/(last four digits of your card number) and send to 2086 for Globe & TM Subscribers or 4629 for SMART & TNT Subscribers.

How do I activate my mobile banking security bank? ›

Go to https://online.securitybank.com/enroll.
  1. Fill-out the necessary information. Account Number. Account Type. Mobile Number. Then, click Next.
  2. An OTP will be sent to your mobile number for confirmation.
  3. Enter your OTP then Click submit.
  4. Type in your preferred username and password.
  5. Click submit.
Jul 26, 2022

Does Bank of America use authenticator? ›

BofA Authenticator SM is an application used in multi-factor authentication. After BofA Authenticator SM is activated, it can support push based authentication and one-time-password based authentication.

Where is the security key located? ›

How do I find my network security key? You can find your network security key through the Wi-Fi settings on your Windows or Mac device. You can also find the default Wi-Fi key on the back of the router or by accessing the network's configuration page through your browser.

What does security key look like? ›

Network security keys are a combination of characters, for instance F23Gh6d40I. If your computer is already connected to your Wi-Fi and you cannot remember the security key and need to find it, you can also find it by going to the settings on your computer.

How do I enable my security key on my iPhone? ›

On iPhone or iPad

Open the Settings app. Tap your name, then tap Password & Security. Tap Add Security Keys, then follow the onscreen instructions to add your keys.

How to activate Security Bank credit card for online transaction? ›

Aside from card activation via SMS you may also activate your card by calling our Customer Service Hotline at (02) 8887-9188.

How do I activate my online banking card? ›

Activate a debit card online
  • Go to the URL provided on the activation sticker on the front of your card, or sign in to your bank's website. This may vary from bank to bank.
  • Have your debit card ready as you may need information on the card to activate.
  • Follow the prompts to finalize your card's activation.

How do I register for Security Bank Online banking? ›

How to Enroll to Security Bank Online
  1. Go to Security Bank Online page.
  2. Click 'Not Yet Enrolled? ...
  3. Click 'Bank Accounts'
  4. Tick 'Complete enrollment form and take note of your application reference number'
  5. Read the Terms & Conditions.
  6. Fill out the Digital Form.
  7. Get your Reference Number.
  8. Wait for SMS or Email Notification.

Can I activate mobile banking online? ›

The registration for Mobile Banking Service consists of two processes: 1) Over mobile handset 2) At SBI ATM or at SBI branch or Onlinesbi. (i) Get User ID and default MPIN: Send a SMS <MBSREG> to 9223440000/ 567676.

Why can't I enroll my security bank online? ›

If you don't have updated contact details with us, you cannot enroll to the new Security Bank Online. You may update your contact details with us by clicking here. Once your contact info is updated, please wait 1 banking day before activating your account.

How do I verify my security bank online? ›

Call the Contact Center at 8887-9188 to request for User ID retrieval. Depending on the verification process, you may be asked to visit your nearest branch to present proper identification before we can send the user ID to your registered email address.

Top Articles
Latest Posts
Article information

Author: Zonia Mosciski DO

Last Updated:

Views: 6643

Rating: 4 / 5 (51 voted)

Reviews: 82% of readers found this page helpful

Author information

Name: Zonia Mosciski DO

Birthday: 1996-05-16

Address: Suite 228 919 Deana Ford, Lake Meridithberg, NE 60017-4257

Phone: +2613987384138

Job: Chief Retail Officer

Hobby: Tai chi, Dowsing, Poi, Letterboxing, Watching movies, Video gaming, Singing

Introduction: My name is Zonia Mosciski DO, I am a enchanting, joyous, lovely, successful, hilarious, tender, outstanding person who loves writing and wants to share my knowledge and understanding with you.