require authentication on your mobile devices by configuring automatic locking with a passcode

By setting a lock timeout with a PIN you will ensure that anytime you access your device you will need the correct PIN to unlock it. This means that anyone other than you who does not know your PIN will not be able to unlock your device. If your device has a built-in fingerprint reader this is also a secure method of securing access to your device.

consider activating wipe after a set amount of failed authentication attempts

With this option, if after a set amount of consecutive authentication failures have occurred, the device will be wiped. This means that everything you have saved on your mobile device (apps, app settings, photos, account information etc.) will be removed, resulting in no information for the unauthorized user to see or use.

keep track of your device

It is important to always know where your mobile device is and to ensure it is secure from theft or unauthorized access.  We recommend never leaving a device unattended in your vehicle or in a public space.  If your device is lost or stolen please call 1-866-4UMPQUA (1-866-486-7782) to inform us.

do not store passwords

It is best practice to never store passwords when accessing your accounts via a web browser. Yes, this makes it easier for you to login to your account but it also makes it easier for someone other than yourself to login to your account should they gain access to your mobile device.

always log off

After logging in to your Umpqua Mobile Banking application, be sure to use the log off option once you are done. This will ensure that you do not leave access to your accounts open.

keep your device and applications up to date

Updating your device operating system software and applications is important. This will ensure that any security loopholes that have been found by mobile device manufacturers are fixed and your device will be protected against any known security vulnerabilities associated with those loopholes.  Most mobile devices will automatically notify you that an update is available and prompt you to install it.

install security software

By installing an antivirus software on your device, you will help protect it from malware and virus attacks. Remember to ensure that the application you choose to download is from a known reputable source. Also, remember that this does not make your device immune to either malware or viruses, vigilance when using social media and not opening links or attachments in unexpected or suspicious emails is still required.

be careful what you download

Do not download applications from unknown or disreputable application stores. It is also important that your device is not configured to install applications from unknown sources.

To ensure this is disabled, go to Settings/Security and look for "Unknown Sources - Allow installation of applications from sources other than the Play Store". This should be disabled.

Be sure to verify the developer of the application before downloading. Applications provided by Umpqua Bank will state that they have been developed by Umpqua Bank and are available for download from the Apple Store and Google Play. Do not download our applications from another application store.  Please note that our applications are free to download (Carrier data rates may apply).

Example from the Apple Store

mobile devices and mobile banking security

do not use mobile devices that have been rooted or jailbroken

Rooting or jailbreaking a mobile device is popular because it allows for customization of the operating system as well as adding extra features to applications from unknown developers (see be careful what you download). When you root a mobile device, you remove the manufacturer restrictions of the operating system and every application that is installed will have full system access to your device. This leaves the device extremely vulnerable to malware and viruses since most mobile device manufacturers do not factor in devices that have been rooted into their software updates.

bookmark the site

If you are accessing your banking information via a browser, bookmark the site so that you avoid the risk of incorrectly manually typing in the website address and potentially being sent to a look-alike phishing site.

situational awareness

Be aware of your surroundings when using your device in a public place. You will want to avoid showing sensitive information where others have a clear view of your device screen. This includes anyone directly around you and anyone that may be able to view a reflection of your mobile device screen.

be cautious when using public WiFi

Public WiFi is very convenient, but the data traffic sent over that wireless connection may be susceptible to eavesdropping. If someone is connected to the same WiFi network as you, they may be able to sniff packet information that you send and receive from your device. Avoid accessing your banking and financial information or accessing sites that require you to input personally identifiable information. If you must use public WiFi to access this information, it is recommended to install a VPN (Virtual Private Network) application that will ensure a secure encrypted connection. Be diligent and ensure that you are installing an application from a reputable developer.  Go over the VPN applications privacy policy to ensure that you know exactly how your data is being utilized when using the VPN application especially if the VPN application is free and requires no payment for its use.