a combination of industry-approved security technologies to protect data for the Boston Private and for you, our customer. It features password-controlled system entry, a VeriSign-issued Digital ID, Secure Sockets Layer (SSL) protocol for data encryption, and a router loaded with a firewall to regulate the inflow and outflow of server traffic.
To begin a session, the user must key in a Login ID and a password. It is recommended that you do not use as your password your Social Security Number, birth dates, names or other personal data that would be easy for another to guess. No Boston Private employee will ever ask you for your password, and you should not provide it to anyone you do not want to access your accounts. It is the user’s responsibility to keep this password safe.
Once the server session is established, the user and the server communicate in a secured manner. The server has a Digital Certificate issued by VeriSign that confirms the identity of the server to the user. Data traveling between the user and the server is encrypted with 128-bit SSL. With SSL, data that travels between the Boston Private and customer is secure and can only be decrypted with the relevant public and private key pair. In short, the Boston Private issues a public key to the end user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user makes a server session.
Industry-standard firewall technologies are in use to restrict access to the Online Banking servers.
Using the above technologies, your Online Banking transactions are secure.