Account safety & security
Article written by InvestNow – Updated 15th February 2022
At InvestNow, the safety and security of our client’s investments is our top priority. We have several layers of protection which minimise the risk of anyone being able to access your account without authorisation.
At the platform level, we store all data in encrypted disks and servers and require two-factor authentication to access all systems. We regularly review user permissions and access levels; log all access; regularly test our business continuity, disaster recovery and backup processes. Independent security consultants carry out regular penetration testing of our systems and websites. Our IT and security policies are reviewed annually.
Your investments are held in a bare trust managed by independent custodian Adminis. This ensures complete separation of client assets from InvestNow as a business, should anything happen to InvestNow. The custodial account is also structured to ensure that all assets, including the bank accounts, are ring-fenced from the custodian’s business. Client funds are reconciled daily and are regularly audited by PWC.
We offer Two Factor Authentication (TFA) with the choice of either email or SMS (text message) as options for receiving a unique passcode, which needs to be entered each time you log in. This helps prevent unauthorised access to your account. As another layer of protection, we keep a record of all bank accounts used to deposit funds to your account, and before approving any withdrawal from your account, we check that you have added the bank account and that we can verify the bank account number and name.
Online security tips:
Online security best practices today include (includes links to resources such as Netsafe & CERT NZ):
- Use a password manager to keep your passwords safe in one place.
- Switch on Two Factor Authentication to add an extra layer of security.
- Use updated Anti-Virus Software.
- Activate a Pop-Up Window Blocker, which may also include adjusting the settings to allow pop-ups from trusted websites and sources.
- Regularly scan your computer for Spyware.
- Only download programs or click links from known and trusted sources.
- Keep your devices and apps updated – updates aren’t just about adding new features, they’re also about fixing vulnerabilities.
- Be cautious about using a public WiFi network, as insecure WiFi networks can allow other people to see your data.
Additional steps to take, specific to your InvestNow account:
- Choose a strong, unique password – we require a minimum of eight characters and a mix of upper and lower case characters, numbers and symbols. In general, longer passwords are more secure (see above re using a password manager with TFA).
- Log in to your account from time to time and check for any unusual activity.
- If you log in and go to Account Settings > My Details, you can change your login security preference. Our recommendation is that you use SMS (text message) to receive your Passcode each time you log in – this can provide some additional protection.
- If there are multiple members on your account, you can review the permissions of the other members under Account Settings > Other members. You can also choose how many members are required to approve each order or withdrawal – just contact us at contact@investnow.co.nz if you want to change this setting.
For more information, you can check Netsafe’s guide to staying safe online: https://www.netsafe.org.nz/wp-content/uploads/2015/09/Staying-Safe-Online-Guide-2020.pdf
Account safety & security
Article written by InvestNow – Updated 15th February 2022
At InvestNow, the safety and security of our client’s investments is our top priority. We have several layers of protection which minimise the risk of anyone being able to access your account without authorisation.
At the platform level, we store all data in encrypted disks and servers and require two-factor authentication to access all systems. We regularly review user permissions and access levels; log all access; regularly test our business continuity, disaster recovery and backup processes. Independent security consultants carry out regular penetration testing of our systems and websites. Our IT and security policies are reviewed annually.
Your investments are held in a bare trust managed by independent custodian Adminis. This ensures complete separation of client assets from InvestNow as a business, should anything happen to InvestNow. The custodial account is also structured to ensure that all assets, including the bank accounts, are ring-fenced from the custodian’s business. Client funds are reconciled daily and are regularly audited by PWC.
We offer Two Factor Authentication (TFA) with the choice of either email or SMS (text message) as options for receiving a unique passcode, which needs to be entered each time you log in. This helps prevent unauthorised access to your account. As another layer of protection, we keep a record of all bank accounts used to deposit funds to your account, and before approving any withdrawal from your account, we check that you have added the bank account and that we can verify the bank account number and name.
Online security tips:
Online security best practices today include (includes links to resources such as Netsafe & CERT NZ):
- Use a password manager to keep your passwords safe in one place.
- Switch on Two Factor Authentication to add an extra layer of security.
- Use updated Anti-Virus Software.
- Activate a Pop-Up Window Blocker, which may also include adjusting the settings to allow pop-ups from trusted websites and sources.
- Regularly scan your computer for Spyware.
- Only download programs or click links from known and trusted sources.
- Keep your devices and apps updated – updates aren’t just about adding new features, they’re also about fixing vulnerabilities.
- Be cautious about using a public WiFi network, as insecure WiFi networks can allow other people to see your data.
Additional steps to take, specific to your InvestNow account:
- Choose a strong, unique password – we require a minimum of eight characters and a mix of upper and lower case characters, numbers and symbols. In general, longer passwords are more secure (see above re using a password manager with TFA).
- Log in to your account from time to time and check for any unusual activity.
- If you log in and go to Account Settings > My Details, you can change your login security preference. Our recommendation is that you use SMS (text message) to receive your Passcode each time you log in – this can provide some additional protection.
- If there are multiple members on your account, you can review the permissions of the other members under Account Settings > Other members. You can also choose how many members are required to approve each order or withdrawal – just contact us at contact@investnow.co.nz if you want to change this setting.
For more information, you can check Netsafe’s guide to staying safe online: https://www.netsafe.org.nz/wp-content/uploads/2015/09/Staying-Safe-Online-Guide-2020.pdf