Secure online banking is our priority.

Our goal is to provide members with quick, convenient, and secure access to their accounts. In fact, speaking of convenience, many of our members have requested the option to log onto Xceed Online directly from our website's front page. Well, we've heard you, and are pleased to now offer that feature on xfcu.org. Please read on to learn more about the security efforts we have in place to ensure the protection of your information when using this new feature.

Xceed Online security information

We know you'll be quick to wonder, "Is my login information secure even though the webpage is not secure (https://) and there is no padlock image displayed in the corner of my browser window?"

Simply put, yes! Your login to Xceed Online is secure. It may seem a little unnerving, because as an online user, you've known for years to look for the padlock image in the corner when performing online transactions and entering personal information. With this enhancement, your information is still protected, even though you aren't seeing the familiar padlock image.

The section of our webpage that contains login fields for Xceed Online is a separate and secure form that passes information from your browser to Xceed Online using 128-bit SSL encryption. After you enter your logon information, this data does not leave the machine until you click the Sign-On button. At that point, a secure connection is established with our Online Banking server and your information is passed only after our servers have verified that this secure connection has been made.

Here is a more detailed sequence of the login process for Xceed Online:

  1. You request a page (such as the homepage at xfcu.org). This page is delivered from the server to your browser over an HTTP connection. After the page is downloaded to your browser, the HTTP connection is closed.
  2. Now, you're ready to begin your Xceed Online session. You enter your login information into the username and password fields of the form. This data does not leave your machine until the next step. When you are typing information into an HTML form, it is not going to the server. Form data is only being gathered in the browser's memory. Data is not sent to the server until the form submission (Sign-On) button is clicked.
  3. You click the Sign-On button. The login form is configured to submit to a SECURE processing page on the banking server. This being the case, the first thing that takes place is a SECURE connection established between the banking server and your browser. No form data is sent until an encrypted connection is established.
  4. Once the secure connection is established, the form data gathered in the browser's memory is packaged up, encrypted, send to the server securely, and the connection is closed.

Still like the old way better?

We'll keep our previous logon screen active (the login button at the top right of our website) for those members who still prefer to connect with a secure (https://) page before entering login information.

If you have questions about Xceed Online or our measures to protect your personal financial information, please do not hesitate to send us an email or call us toll free at 800.XFCU.222. We thank you taking advantage of our electronic services, and want to ensure that you have every confidence when doing business with us.