Portfolio Online | Security requirements

Security requirements

Security Measures that IOOF takes to Protect You

Security Measures which IOOF takes to protect your interaction with the IOOF website include:

Digital Certificates

A digital certificate is used to verify the identity and authenticity of our website. To view the digital certificate, double click on the padlock icon in the bottom right hand corner of your browser window. This provides trusted third-party verification that you have connected directly with Portfolio Online.

Secure communications

Our websites are secured with 128-bit Secure Socket Layer (SSL) encryption, the industry standard for secure communications on the internet. SSL encrypts your data and protects it from unauthorized viewing or use.


If someone does try to guess your password, your account will be locked after a pre-determined number of unsuccessful attempts. This will help prevent an unauthorised user trying multiple times to guess your password.

Time of last login

Portfolio Online will provide you the date and time of last sign in. This gives you assurance that no one else has accessed your accounts.

Automatic Time-out period

For your protection, IOOF includes a Session Time-out feature for your online session. If your session remains idle for a given time, your session is ended automatically. This is done to protect your accounts from unauthorised access if your PC is left unattended or you have not logged-off your session.


IOOF uses Firewalls to block potentially destructive information from entering our computer systems and prevent unauthorised access. Firewall software can be installed on company and home computers as a barrier against hackers and viruses.

Independent Audits

Reputable independent consultants are regularly contracted to verify the security of our systems. The work undertaken by the consultants includes reviews of areas such as architecture, firewall configurations, network device security, web server security and web application security.

Security precautions that you can take

A few simple precautions can help keep your computer safe.

Close your Portfolio Online session when you are done.

You should always log out of your session and close your browser windows when you are finished with Portfolio Online. To help you protect your information, your Portfolio Online will time out after a given amount of inactivity if you have not already logged out.

Secure your passwords

A strong password is your first line of defence. There are many systems that people use for choosing passwords, and some are better than others. Here is one system that we like:

In general, a good password should:

Always memorise your password and do not write it down. Change your password regularly.

Secure your computer

There are certain precautions you can take to help minimise the risks from viruses or hackers:

Be aware of Spyware

Spyware is a general term used for software that is loaded on to your computer without your knowledge. It collects personal information about you and your internet browsing habits in order to launch popup ads or change the configuration of your computer. You might have spyware if:

You should check your system for spyware regularly.

Useful links*


For more information about choosing and remembering strong passwords, take a look at the recommendations from US-CERT.

Securing your PC


You can find step-by-step instructions at Microsoft's Protect Your PC site, and you can find some answers to general questions about personal firewalls at the Microsoft Internet firewalls: Frequently asked questions page.

* We are not responsible for the content of any site owned by a third party that may be linked to the IOOF website, whether such a link is provided by us or by a third party. These links are provided as a courtesy service and no judgement or warranty is made by us concerning the suitability, accuracy or timeliness of the content of any site that may be linked to the IOOF website. By providing access to other websites, we are not recommending or endorsing any brand, products or services offered by the organisation sponsoring or owning the linked website.

back to top back to top