FDIC
Your OneAccount is insured by the Federal Deposit Insurance Company (FDIC). The FDIC guarantees the safety of all deposits of its member banks. Click here to learn more about the FDIC and how FDIC insurance covers an individual account holder for up to the maximum amount allowed by law.

Zero Liability Protection
MasterCard® Zero Liability protection provided by Higher One offers you peace-of-mind. Zero Liability means fraudulent purchases made with your card are covered in the event your card is lost or stolen.

TRUSTe®
Higher One uses the TRUSTe web Privacy Seal Program. TRUSTe is an independent, non-profit organization whose mission is to build user’s trust and confidence in the Internet by promoting the use of fair information practices. Higher One has disclosed its information practices and had its privacy practices reviewed for compliance by TRUSTe.

WhiteHat Security
Higher One is guarded by WhiteHat Sentinel, WhiteHat Security’s industry-leading website security solution. To help address concerns about safeguarding your confidential data from security breaches and hacker attacks, the "website Security by WhiteHat Security" mark appears only on sites that use the WhiteHat Sentinel Service.

WhiteHat Sentinel conducts rigorous and ongoing security testing on thousands of the world’s leading websites, including many Fortune 500 companies. WhiteHat’s patented methodology exceeds the strictest industry standards as established by the Payment Card Industry (PCI) Security Standards Council, founded by American Express, Discover Financial Services, JCB International, MasterCard Worldwide, and Visa Inc.

Secure Account Set-Up
When you log on to create a OneAccount, we ask you to create a username and password. Your password is encrypted and will remain a secret as long as you do not disclose it. For additional security on your account, you have the option of taking advantage of Higher One’s Security PassCode feature. The Security PassCode feature ensures that an additional personalized verification step is taken when you contact Higher One.

Secure Account Log-In
To securely log on to your OneAccount, you are asked to provide your username and password. Once logged into Higher One’s website, all communications between your web browser and Higher One’s servers are protected with the highest level of encryption available on your browser, with a minimum of 128-bit SSL encryption. View the list of Higher One supported browsers. If you suspect fraud, please contact us immediately at the toll free number listed on the back of your card.

Timed Log-Off
Higher One’s system will automatically log you off from your OneAccount after 20 minutes. This reduces the risk of others accessing your information from your unattended computer.

Firewall
Higher One’s computer systems are protected 24 hours a day by powerful, state-of-the-art firewall systems that block unauthorized entry. The intrusion detection system is monitored by security professionals 24/7. In order to gain access to authorized information, the web browser you are using must know the proper protocol, or language, and even then only select information is available.

Encryption
From the moment account information leaves your computer to the time it enters Higher One’s system, all online access is encrypted. Higher One employs some of the strongest forms of encryption commercially available for use on the web today. During any transaction, our 128-bit encryption turns your information into a coded sequence with billions of possible variations, making it nearly impossible for unwanted intruders to decipher. Additionally, sensitive customer data is encrypted in our database. Higher One’s computers possess the proper formulas to turn this code back into meaningful information and complete your transaction. Look for a “closed lock” icon in your browser to confirm if encryption is being used on any web page you are viewing. Any web address beginning with “https://...” indicates the page you are viewing uses encryption. The “s” stands for “secured.”

Systems Monitoring
Higher One systems are constantly monitored to detect any attempted intrusions. The intrusion detection system runs 24/7/365 and all alerts are monitored by security professionals at the hosting provider. Regular vulnerability scans are conducted to ensure that all of the protections are in place and functioning correctly. Higher One will continue to do what we believe is necessary to protect both you and Higher One.

Information Security Program
Higher One maintains a comprehensive information security program of policies, procedures and technology that is designed to safeguard customer data and comply with banking regulations.

Physical Security
Higher One is hosted out of PCI certified data center with 24/7 guards, cameras and multiple layers of physical security.

Audit
Higher One’s information security is annually audited by a 3rd party assessor.