Two-factor authentication explained

When you log into your MIDFLORIDA account from a new device, you’re prompted to verify your identity with a one-time passcode and choose how you’d like to receive the code. Our system then generates a six-digit code and sends it to either the email address or phone number that we have on file. Once you’ve verified your identity by entering the passcode, small files (called cookies) are placed on your device, essentially registering it with MIDFLORIDA’s Online Banking. If you ever delete your device’s cookies, the system will prompt you to re-register your device with another one-time passcode. Learn more about registering your device.

Add an extra layer of protection

To further secure your account, you can utilize an authentication app such as Google Authenticator, or purchase a physical security key from YubiKey. These options take two-factor authentication one step further by requiring that you have access to either authentication software or hardware that plugs into your computer’s USB drive. While scammers can find ways to hijack text messages or emails that contain one-time passcodes, they are unable to intercept passcodes generated by Google Authenticator unless they have access to your smart phone. Likewise, scammers are unable to access any account protected by YubiKey unless they have possession of the key itself.

Learn more about keeping your account secure with authentication software or hardware by selecting “2-Step Authentication” in the Profile section of Online Banking. Please note that, if you lose access to the authenticator app or YubiKey, you may have to contact the Help Desk for login assistance.

Other ways to keep your account safe

Please visit the Security and Fraud Information resources section for more information about keeping your account secure.