Skip navigation and go to page content

how ALEC protects you

We've always believed there's no such thing as being too safe.

Since our inception, protecting your account security and personal privacy has been a top priority. Today, we remain as committed as ever to updating our systems with the leading technologies to help keep your financial information safe from criminals who are eager to steal it. We have staff that is dedicated to monitoring the accounts of ALEC members. Our state-of-the-art fraud prevention systems have been designed to identify any suspicious activity and notify you immediately in such cases. Continue reading to learn how ALEC protects you.

A host of high-level security precautions are utilized by ALEC, including:
Individualized password

When you sign up for Online Banking, ALEC asks you to create your own username and password for access to your accounts. This information is encrypted during transmission. You can now select your own personal username to sign on. We strongly recommend you don’t use your account number or social security number as a username or password. To create a new username, sign on to Online Banking and go to Account Services.

ALEC may request a member’s account number to authenticate the member by phone or email. However, we do not request a member’s online banking password to verify their identity. If there is ever a question regarding the legitimacy of an email, you should visit alecu.org and sign on from the homepage.

Enhanced Authentication

Providing extra protection for your online data, Enhanced Authentication helps guard against phishing or pharming scams and identity theft by recognizing your computer and usage patterns. If a questionable logon attempt is detected, the system will require additional identity verification before allowing access.

Timed log-off

ALEC’s system will automatically log you off from Online Banking after inactivity. This reduces the risk of others accessing your information from your unattended computer.


ALEC’s computer systems are protected 24/7 by a powerful firewall that blocks unauthorized entry. In order to gain access to authorized information, your web browser must know the proper protocol, or language — and even then, only select information is available.


From the moment account information leaves your computer to the time it enters ALEC's system, all Online Banking sessions are encrypted. ALEC employs some of the strongest forms of encryption commercially available for use on the web today. Look for a “closed lock” icon in the top right corner (Safari, Google Chrome, and Microsoft Edge) of your browser or in the right end of the address bar (Firefox 2) to determine if encryption is being used on any Web page you’re viewing. Any Web address beginning with “https://...” indicates the page you’re viewing uses encryption. The “s” stands for “secured.”

Ongoing monitoring

ALEC carefully maintains and monitors our security systems constantly to provide maximum protection for your accounts.

Additional security measures

ALEC's layered approach to online security extends beyond a unique username and password, encryption, firewall, technology updates and ongoing monitoring. Additional security measures may be activated in response to certain activities or events. If we’re suspicious of any online behavior, we may restrict online access to accounts or prevent certain types of transactions. These measures safeguard your identity and your accounts. Further proof of identity may be required before online access is restored.

Technology updates

To address evolving online threats, ALEC has continued to enhance our security measures to help protect your accounts.


There may be times when ALEC staff will need to ask additional questions to authenticate you as a member. We do this to protect your accounts. This is especially true when communicating over the phone or via email. ALEC has in place layered controls to ensure your account is accessed only by you. As a reminder, ALEC will never request your Social Security Number, PIN, CVV or one-time passcode by phone, text, or email.