Yenra : Security : AOL PassCode : Two-factor authentication system requires both normal account password and current device code

PassCode

America Online and RSA Security have launched AOL PassCode, a new premium service that offers members a second level of AOL account protection through the use of a keychain-sized device that generates and displays a unique six-digit numeric code every 60 seconds.

"AOL PassCode is like adding a deadbolt to your AOL account by automatically creating a new secondary password every 60 seconds," said Ned Brody, AOL's Senior Vice President for Premium Services. "Many of our members use their accounts for business purposes, financial transactions or other sensitive activities. AOL PassCode offers a higher standard of protection through the same state-of-the-art two-factor authentication system used by many financial institutions, technology companies, and other major businesses. We're proud to be the first online service to offer this extraordinary supplementary level of security protection to our users."

AOL PassCode offers a higher standard of protection for members through the same RSA SecurID state-of-the-art two-factor authentication system already used by thousands of businesses worldwide. AOL members using PassCode must enter their normal account password and the current device code in order to access their account.

"The emergence of new and more pervasive online threats and an increase in what consumers can and want to do are requiring better ways to protect personal information online," said Art Coviello, President and Chief Executive Officer at RSA Security. "AOL PassCode is a powerful, yet simple tool that helps ensure an AOL account, and the information in it, is being protected by one of the world's strongest authentication technologies. RSA Security leads the market in strong two-factor authentication, and we're pleased to work with AOL to extend that leadership into online consumer identity protection."

To log into an AOL account, users are prompted for both their normal password and the token code generated by the PassCode device. Based on RSA Security's patented authentication technology, the device generates a simple, six-digit code that changes every 60 seconds. The result is a unique, one-time-use PassCode that is used to positively identify, or authenticate, the user. If the code is validated by the system, the user is granted access to their AOL account. If it is not recognized, the user is denied access. "The AOL PassCode Service Offering is a historical event in e-commerce and will pave the way for much needed and more widespread two-factor authentication among U.S. consumers and their service providers," said Avivah Litan, vice president and research director at Gartner, a provider of research and analysis on the global IT industry. "AOL is ahead of its peers in realizing that consumers are willing to pay for additional security, and utilizing RSA Security's practical, proven technology is a logical choice."

AOL is offering AOL PassCode as a premium service to AOL members for a one-time cost of $9.95 for each device plus an additional $1.95 - $4.95 per month, depending on the number of screen names on the account that are secured to an AOL PassCode device.

RSA helps organizations protect private information and manage the identities of people and applications accessing and exchanging that information.

America Online is now part of Oath.