Frequently Asked Questions

Account Access: Browser and Web Site Security

  Return to Top of Page

 1.  How can I securely access my TSP account information?  

If you want to access account information and make on-line transactions through this Web site, your browser must have Secure Sockets Layer (SSL) and 128-bit encryption.  To access account information through either this Web site or the ThriftLine, you will need to use your Social Security number (SSN) and your TSP Personal Identification Number (PIN).  If you have forgotten your PIN, you can get a new one through Account Access or by calling the ThriftLine.

There are three ways the TSP keeps account information secure:

• The TSP never sends your name or SSN over the Internet.
• The TSP computer system requires you to enter your TSP Personal Identification Number (PIN) before it allows access to your TSP account information.
• The TSP computer system uses state-of-the-art encryption technologies. 

You can block online access to your personal TSP account information by writing to the TSP Service Office, National Finance Center, P.O. Box 61500, New Orleans, LA 70161-1500.  Include your SSN and your date of birth in your letter.  Note, however, that if you block online access, you will not be able to access your personal TSP account information on either this Web site or the ThriftLine.  (You will have to write to the TSP Service Office to unblock access.)

Encryption is a process by which your password and all information relating to you and your TSP account information is scrambled and locked with a mathematical key during an electronic transaction for your protection.  Most browsers have an icon such as a key or a lock to represent an encrypted mode or session.  A broken key, open lock, or no lock indicates that the session or mode is not encrypted.

Your Web browser must meet TSP requirements for maintaining the privacy and security of your TSP account information.  Your Web browser must support Secure Sockets Layer (SSL) and 128-bit encryption.  The 128-bit encryption must be downloaded and activated on your browser.

For more information about encryption on your browser, look in the security information section of the browser's "Help" feature.  You can also contact Netscape, Microsoft, your system administrator, or your Internet service provider for information about the level of encryption on your browser.

This Web site now uses upgraded encryption — International Step-up or Global Server ID — that establishes temporary 128-bit encrypted sessions for overseas TSP participants when they use the Account Access section of this Web site.  This encryption is accessible to you if you use a recent version of a browser, such as Netscape Navigator, or later versions of Microsoft Internet Explorer.  You can find technical information about this encryption technology on the Internet.

We are aware that this happens with some computer systems and have determined that its source is the AutoComplete feature of the MSIE (Microsoft Internet Explorer) browser.  We recommend that you disable this feature immediately so that it does not store a SSN or PIN previously entered in your MSIE file.

 To disable the AutoComplete feature:

• First, click on Tools (MSIE v.5) or View (MSIE v.4).

• Finally, click OK to save the new settings.

We have discovered that most Unix, AOL, and Web-TV users who are experiencing difficulties accessing their TSP accounts do not actually have the most recent browser and encryption module installed.  Downloading and installing the latest browser and/or operating system patches that have 128-bit encryption usually takes care of the problem.  You can generally download the latest version of a browser with the necessary encryption free of charge from the Internet.  However, if the problem persists, we recommend using the most recent version of the Netscape Navigator browser.

This is not a TSP-related issue.  If you try to access one of our Account Access secure pages and you encounter a warning dialog box stating "Certificate Authority has expired,"  the warning message refers to the root VeriSign® Certificate Authority (CA) certificate expiration, which does not affect the Secure Sockets Layer (SSL) encryption used with this Web site.

You can avoid the warning by upgrading your browser.  To download the latest version of your preferred Internet browser now, visit either Netscape's Web site, www.netscape.com, or Microsoft's Web site, www.microsoft.com.

This is not a TSP-related issue.  These advisories represent Internet security flaws that occur when security certificates have expired. You can avoid the security flaws of older versions of browsers by checking to see whether your browser's security certificates have expired and, if necessary, upgrading your browser to the latest version.  To download the latest version of your preferred Internet browser, visit either Netscape's Web site, www.netscape.com, or Microsoft's Web site, www.microsoft.com.  For background information regarding security flaws and possible technical solutions, click on Security Advisories.

    Return to Top of Page