Harborstone Credit Union: No One Takes Better Care of You
Real-Time Alerts:
Follow @HCUAlerts
on Twitter

Security and Fraud Education

At Harborstone, we know that your personal financial information is an asset worth protecting. Please visit this section of our website often to view our frequently updated security resources, which will keep you informed about the latest scams—and how to avoid them.

In a time when fraud, scams, and identity theft are a real concern, Harborstone uses the latest security protocols to ensure that your financial transactions and personal data remain confidential. We also provide up-to-date information about online scammers' tactics, because we believe that awareness and education are key tools in keeping your information safe.


  • Overview
  • Current Alerts
  • Resources
  • Security Standards

What are the Harborstone Credit Union Online Banking security standards?

We care deeply about keeping your money safe while providing you with easy access to your accounts. With the continued growth of Online Banking, there are increased needs for greater security standards to keep you and your money well protected.

Our security standards are designed to provide you with the best protection available and will make it safer for you to monitor and manage your money while safeguarding against unauthorized access to your accounts. Please be sure to use a supported Internet browser for the best experience.


What do I have to do to log in?

Your user ID must be at least six characters long and made up of a combination of letters, numbers and special characters (@$*_-=.!~). Your password must be at least six characters long, no longer than 32 characters, and contain characters from at least two of the following three categories: letters, numbers, special characters (@$*_-=.!~). Your member number is not an eligible username.

You are required to verify your identity by phone, or email, when you log in to Online Banking for the first time. After providing your username and password, you will be asked to provide a phone number for a phone that you have with you, or an email address if you do not have access to a phone. We will immediately send an access code to your phone (via voice or text message) that you will enter into your computer to complete your log in.

You can opt to have this computer remembered so that you do not need to repeat this step each time you log in. However, you must obtain a new access code for each computer or mobile device you use to log in that is not remembered on the system.


How will using my phone make my account safer?

We implemented what is known as “multifactor authentication”, which makes it more difficult for phishers and attackers to access your accounts without you knowing it. While this might seem unfamiliar, you actually use it every time you visit an ATM. When you access your account from any ATM, you need both your ATM card (something that you have) and PIN (something that you know).

We’ve implemented the same type of protection by using both your password and your phone to access your account. By doing this, even if an attacker or a phisher manages to steal your password and tries to use it to log in, the attempt would be unsuccessful without having your phone as well.


Why should I use my cell phone instead of my landline phone?

Providing your cell phone number will give you the freedom to choose how you receive your access code, via voice or text message. If you choose to provide your landline phone number, it has come to our attention that there are many members who may or may not be aware that their landline phone numbers have been set up to block unknown callers. This landline phone setting will prevent you from receiving your access code. Please contact your landline phone provider if you would like to remove the setting to allow block unknown callers. Otherwise, we encourage you to provide your cell phone number or email to receive your access code.


May I use an email address to get my access code?

If you do not have access to a phone or are accessing your account while outside of the United States, please select the email option to verify your identity when you log in to Online Banking.


Will I always need to use both my password and my phone from now on?

The first time you attempt to log in from a new computer, you will need to use both your password and the access code you receive on your phone, or email, in order to log in. If you are accessing your account from a private computer that you personally use, you can opt for the system to remember your computer for future log ins.

By doing this, you will not need to repeat the step of obtaining an access code via phone, or email, and you will need only your username and password in the future to log in.

For the best security protection, we suggest that you always use both your phone, or email, and your password. If you choose to have your computer remembered, we recommend that you do so only on computers that you personally own and that have the latest updates and virus protection software installed on them.


What if I log in from another computer or mobile device?

The first time you log in from another computer or mobile device, you will need to use both your password and a new phone, or email, access code to log in. However, you can choose to have your new computer/mobile device remembered on the system so that you need only your username and password for future access to your account online.


How does Apple Touch ID™ secure my mobile device?

We've integrated Apple Touch ID into the Harborstone Mobile Banking app for iPhone to help make your login even faster, easier, and more secure.

  • No need to type a password. Your fingerprint is all you need.
  • No extra setup. The Harborstone app works with the Touch ID you already set up on your iPhone 5s, iPhone 6, or iPhone 6 Plus device with iOS 8.
  • No need to worry about stolen passwords.

Touch ID allows you to use your fingerprint, instead of entering your username and password, to log in securely.

Fingerprints are stored only on your device. In addition, they are encrypted with a key that is accessible only to the device, offering an overall secure means to access sensitive financial information. Harborstone does not see or store your fingerprint information.

By enabling Touch ID, every person with an enrolled fingerprint on your device will have access to your Harborstone accounts. Review the enrolled fingerprints to make sure that each person is authorized to access the personal and financial information available in the app.


What supported Internet browsers and mobile operating systems should I use?

Below is a list of Harborstone's supported Internet browsers and mobile operating systems that will help to ensure that you have the best Online and Mobile Banking experience.

Supported Internet Browsers:

  • Google Chrome
  • Mozilla Firefox
  • Safari 8
  • Internet Explorer 8, 9, 11

Find out exactly what browser you're using with whatismybrowser.com to help validate if your computer is running a Harborstone Online Banking supported browser.

Supported Mobile Operating Systems:

  • iPhone® phone (iOS 6.0 or later)
  • iPad® (iOS 6.0 or later)
  • iPod® touch (iOS 6.0 or later)
  • Android™ phone (Android OS 2.3.3 and up)
  • Android Tablet™ (Android OS 2.3.3 and up)
  • Kindle Fire™ (Android OS 2.3.3 and up)

Download the Harborstone Mobile Banking app on iTunes, Google Play, or Amazon.

If your mobile device doesn't offer the Harborstone app, mobile web banking provides you with access to your accounts from any mobile device that can access the Internet. Harborstone's mobile website allows you to transfer funds and pay bills in seconds.



Switching To A Harborstone Checking Account Is Easy.
Apply  |  Join
  • Verified by VISA
  • Your savings federally insured to at least $250,000 and backed by the full faith and credit of the United States Government. National Credit Union Administration, a U.S. Government Agency.
  • Equal Housing Opportunity
  • Harborstone Credit Union is a BBB Accredited Credit Union in Lakewood, WA
(253) 584-2260 OR 1-800-523-3641
P.O. BOX 4207, TACOMA, WA 98438-0207