Security & encryption

How can I be confident that my account information is secure?

The privacy and security of your account information is very important to us. To protect your information, our website and mobile app use the following security features:

• Encryption. Plum uses TLS (Transport Layer Security) encryption technology to protect your information. To ensure compatibility, please keep your browser up to date.
• Session timeouts. This means we will automatically log you out if you’ve been inactive for a while.
• Digital certificates. These are used to verify the identity and authenticity of our websites. To see it, click the padlock icon on your screen in the browser’s address bar.
• Multi-Factor Authentication. For your security, the first time you log in to Plum Online or the Plum Mobile App, we’ll guide you through setting up Multi-Factor Authentication (MFA). This simply means we’ll send a one-time passcode to your nominated mobile number, to help keep your account safe.
  From time to time, we may also ask you to enter a one-time passcode when logging in or completing certain transactions on our website or mobile app. These extra steps help to ensure your information stays protected.

We strongly recommend logging out from the website and mobile app once you’ve finished viewing your account.

To change your password

To access your account, you require a password as well as your member number or email address. For the security of your account, you should not reveal your member number and password to anyone. Five unsuccessful attempts to enter your password will result in your account access being disabled. If this happens, you will be prompted to reset your password.

If you suspect that someone knows your password, you should change it immediately. You can change your password via the Plum website by:

• Logging using your member number or email address and password;
• Clicking Update my details at the top of the page;
• Select Update my password; and
• Follow the steps to update your password.

Or via the “Forgotten your password?” link on the website and mobile app login screen and follow the prompts to reset your password.