You can use Retirement Online with complete confidence knowing that your personal account information is safe and secure. For one thing, Retirement Online uses the same security safeguards used by banks and other financial institutions for online transactions. But we also use other important safeguards, some of which are described below.
Your online security begins the moment you register for your Retirement Online account.
The registration process will take you through a series of steps, where you’ll be asked to provide personal information, including your date of birth and the last four digits of your Social Security number. Then you’ll be asked a series of security questions to verify your identity. These questions are provided by a trusted third-party source. NYSLRS doesn’t store the questions or your answers.
Next, you’ll need to select a user ID and password. Be sure to create a password that is both strong and easy to remember. You may want to read our Tips for Secure Passwords blog for guidance. Remember to keep your password to yourself. (A NYSLRS representative will never ask for the password to your account.)
When you register, you’ll also be asked to select how you would like to receive security codes. Security codes help you sign into your account (see more about signing in below).
Retirement Online uses a two-step sign-in process to securely sign you in to your account.
First, you’ll enter your user ID and password, and check the Google reCAPTCHA box. After you click the Sign In button, you’ll need to receive a security code to complete the sign-in process.
The security code provides an extra layer of protection for your account. The code goes to the device of your choosing, based on the contact preferences you selected when you created your account. Security codes can be received by text message or phone call.
Once you receive and enter the security code, you can finish signing in to your Retirement Online account.
You’ll have the option of registering a device, such as a laptop or desktop computer, so you can skip the security code when signing on with that device. If you choose to do this, make sure it’s a private, secure device that only you will use. Don’t register a public device, such as a computer at the library.