Anti-Phishing Protection

ALPass Online checks web sites to make sure you are visiting the right web site and not a fake phishing site. This is to help protect yourself against theft and identify fraud.

What Is Phishing?

Phishing is a special kind of social engineering attack designed to trick you into giving personal information away. Very often these attacks are specifically for banks and online payment systems. If you receive an email about your bank account, it is most likely a phishing attack.

Phishing sites look almost identical to the real site and can be very convincing.

How Does ALPass Help Protect Me?

To help protect you, ALPass will check to make sure that the keywords you have chosen for a site match in the first 4 parts of the domain of the real site. If it doesn't match, then ALPass won't recognize the site and won't do anything.

For example, say your bank's online banking site is:

www.mybank.co.uk

And your keyword for your bank is:

mybank.co.uk

Then if you visited a phishing site like this:

www.mybank.co.uk.phisher.com

ALPass would look at the domain and see that "mybank.co.uk" is not inside of the first 4 parts of the phisher's site, that is, not inside of "co.uk.phisher.com". The "stronger" you make your keywords, the safer you are. This lets you relax your security level for sites that change domains dynamically for load balancing, like some of the major free email providers.

We recommend using the complete host domain as your keyword to help give you the maximum protection against phishers.

Can I Manually Override ALPass Online?

Yes. You can override ALPass Online and manually take control. This is so that you can reuse your logins that are identical for different sites. That isn't a good security practice, but the decision is yours.

To override ALPass Online:

Click the ALPass button on ALToolbar
Select the site with the correct login information
Click the Fill button