Security

Controlled Access

Protecting your information

OPB provides robust and multi-layered security on our servers and applications, controlling access through firewalls. OPB performs regular reviews of our security practices and technology updates.

OPB uses many techniques to proctect your information, including:

Data encryption Once you successfully enter your User ID and password to log into OPB e-services, we encrypt all internet communications and transactions between your browser and OPB.

To help ensure the integrity and confidentiality of online transactions, our website uses Secure Sockets Layer (SSL) 1024-bit encryption, the Internet security standard.
Authentication OPB grants access to your account only when a valid User ID and Password are entered. Once you are logged into your online account, your browser establishes a secure SSL connection between your computer and OPB servers.
Password protection To prevent others from guessing your password, OPB will disable the password to your online account after 5 consecutive unsuccessful attempts to sign-on.

If this occurs to you, please contact clientservice@opb.ca

OPB will not be held responsible for any loss or damages incurred as a result of unauthorized use of your password.
Session time-out Whenever you are signed on to your OPB online account, and you have been inactive for more than 30 minutes, your online account is automatically closed.

If your account is closed after a period of inactivity, you will need to sign on again, re-entering your User ID and Password.

What you can do to protect your information

Choose your password carefully and keep it safe. Anyone who has access to your login credentials could view or alter your confidential information.

Tips for creating a strong password

The more characters in your password, the harder it is for someone to guess. A long but simple password is often safer than a short, complex one - and easier to remember.

  • Pick a password that you can easily remember.
  • Pick a mixture of letters and numbers.
  • Mix capital and lowercase letters.
  • Consider using phrases, such as 'Luv2Laf' for 'Love to Laugh'.
  • Don't include personal information (SIN, birthday, or maiden name).
  • Don't use a word or acronym that can be found in the dictionary.
  • Don't use a password that you've seen as an example of how to pick a good password.
  • Don't use keyboard patterns (asdf), or sequential numbers (1234), or repeat digits/letters (aaaa or 1111).
  • Never use the same word as your User ID, or any variation of it.

Safe Computing practises

Tips for protecting information on your personal PC.

Remember to log off. Always properly log off and close your browser. This prevents others from viewing this information later.
Keep your computer healthy. Remember to check the websites of your operating system and web browser vendors for software "patches" and updates. This helps protect against software vulnerabilities.
Use anti-virus software. Viruses can enter your computer without your knowledge. Always use up-to-date anti-virus software that is capable of scanning files and email messages for viruses.
Use anti-spyware. Protect your computer against unwanted software being installed without your knowledge. Use up-to-date anti-spyware to help protect against slow performance.
Use anti-spam software. Use up-to-date anti-spam software along with your anti-virus software. If you receive spam: don't try, don't buy and don't reply. Just delete it.
Use personal firewalls. A firewall creates a barrier between your computer and the rest of the Internet. It helps protect against malicious attacks and blocks certain types of data from entering your computer.

Cookies

OPB's e-services uses non-persistent 'session' cookies to authenticate users and support their online activities. These cookies do not contain personal or financial information.

Session cookies are used only for the length of time you stay on the website. When you log out or close your browser, they expire and are no longer active. As a safety precaution, these cookies will also expire if your e-services session has timed out after 30 minutes of inactivity.


Wireless Access (WIFI)

If you are using a wireless network to access e-services, or are conducting any other online activity, ensure the network is secured. Using an unsecured network may put your online activities and data at risk of being accessed by unauthorized users.

It is recommended you use your own computer for sensitive activities. Public computers should not be trusted for anything but casual usage. Public computers may store personal information such as usernames and passwords, or may become infected with malicious software.


Certificates

Digital security certificates are used to allow individuals or organizations to verify each other's identity online. OPB uses certificates to help provide a trusted and secure connection to our website.

If you encounter a certificate warning when attempting to access our website, such as the message shown below, we recommend you do not proceed.