Secure Login System - Strength and Security
Secure Login System
Consider this: if an Internet hacker or identity thief should somehow manage to obtain your ARC username and password, they WILL NOT be able to access your account unless you provide them with the code generated by your IBKey or Authentication app or they have physical possession of your Secure Login System security device or full access to your smartphone. Benefits of the Secure Login System include:
- The security device provides a layer of additional security to your ARC account.
- Participation in the program results in higher daily and weekly withdrawal limits.
- If you have multiple accounts, you don't need multiple devices. You can share a security device among multiple usernames registered to the same individual.
Temporary Mobile Two-Factor Authentication
During the account application process, you will be asked to confirm a mobile phone number to continue. This will enable two-factor security through SMS mobile phone messaging. ARC will send you a one-time passcode when you try to login.
The mobile two-factor authentication is temporary and will be removed once you activate one of the digital or physical security devices listed below.
Passkey
Passkey is a phishing-resistant two-factor authentication method for your ARC account. Authentication is performed using biometrics, such as facial recognition or a fingerprint scan, a PIN, or a physical security key. Based on the WebAuthn/FIDO2 standard, Passkey uses cryptographic technology to protect your account from unauthorized access. It is supported across a range of devices and platforms, including Android and iOS smartphones, physical security keys, and password managers.
Physical Security Devices
Digital Security Card+ - Available to accounts with a balance greater than 1,000,000 USD2, this card adds an extra layer of security through the use of a PIN number, a challenge code and a high count of possible code permutations.
How to Request a Security Device
- Existing Clients - Accounts with equity above $1,000,000 may request a Digital Secure Card+ as a complement to their IB Key or Mobile Authenticator app. To do that, please follow the instructions.
When Will I Receive My Device?
Activation
Once you have received your physical security device, log into Portal and follow the instructions to activate your device.
How to Request a Replacement Security Device
In the event that your physical security device has been lost, stolen or is inoperable, follow the instructions in the Secure Login Systems User Guide.
Withdrawal Limits
Clients who participate in the Secure Login System enjoy enhanced withdrawal capabilities, while clients who do not participate are subject to daily and weekly withdrawal restrictions. The amount that a participating client may withdraw or transfer over a given one- or five-day period increases commensurate with the protective value of the device and is outlined in the table below.
Withdrawal Limits for ARC Clients
| Security Device | Maximum Withdrawal per Day | Maximum Withdrawal in 5 Business Days |
|---|---|---|
| None (2FA Not Configured) | 50K USD | 100K USD |
| Temporary Security Code | 50K USD | 100K USD |
| SMS (Text) Message | 200K USD | 600K USD |
| Mobile Authenticator App | 1M USD | 1M USD |
| 1M USD | 1M USD | |
| Security Code Card* | 200K USD | 600K USD |
| Digital Security Card+ (DSC+) | Unlimited | Unlimited |
| Platinum* | Unlimited | Unlimited |
| Passkey | 1M USD | 1M USD |
Notes:
* Represents a legacy device no longer being issued and in the process of being replaced.
- Please note that while ARC imposes no fee to use a device, a replacement fee is associated with certain devices if they are lost or damaged.
- The cited USD amounts are for reference purposes only. The actual local currency amounts are subject to the prevailing foreign currency exchange rates.
