American Express realizes how important security is to you, so we've taken a number of steps that help enhance the safety and confidentiality of transmissions of private information sent from American Express over the Internet.
A. Whenever American Express asks you to send confidential information over the Internet, including personal account information, we require that a "secure session" using SSL first be established.
A. During a secure SSL session, information passed back and forth between your computer and American Express systems is secured by using public key cryptography. Your computer exchanges key information with American Express computers to create a private conversation that only your computer and American Express systems can understand.
Q. What specifically is SSL?
A. Any time you access or supply Card account information in one of our secure online areas, that information is encrypted by a technology called Secure Sockets Layer, often abbreviated as SSL. SSL technology secretly encodes information as it is being sent over the Internet between your computer and American Express systems, helping to ensure that the information remains confidential. The use of SSL requires two components: an SSL-compatible browser and a web server to perform the "key-exchange" that establishes an SSL connection to American Express Web server systems.
* Netscape Navigator * Microsoft's Internet Explorer
A. Nearly all Internet Service Providers (ISPs) automatically enable the SSL session described above, as do most online services such as Navigator, AOL, Pacific Supernet Ltd. If you use your company's internal connection to access the Internet and you find you can not access American Express' secured pages with an SSL browser described above, your company may be blocking access via a "firewall". Please speak to your firm's Internet access systems administrator for further details on your network's Internet access.
A. Secure SSL sessions are established in American Express Online Services areas where your personal information is being transmitted, including : Card Account Balance Online Account Statement eServicing
A. Many areas require the use of an ID and password as an additional security measure that helps protect your confidential information. This lets American Express verify exactly who you are, thereby allowing you access to your account information, and helping prevent unauthorized access.
A. When you have finished using a secure area of American Express Online Services make sure you always click on the red "Exit Secure Area" link which appears on the left hand side of every secure page. When you click on it, you will be given the option to end your secure session. No further secure transactions can be conducted without re-entering your User-ID and password.
A. Browser software often "caches" pages as you look at them, meaning that some pages are saved in your computer's temporary memory. Therefore, you may find that clicking on your back button shows you a saved version of a previously viewed page. Please keep in mind that caching in no way affects the security of your confidential User-ID or password. If you use your computer in a public place, please read "What should I do if I am using a 'public' computer?" below.
A. If you use a computer that others also work and you are uncomfortable that they may view "cached" pages after you have left the station, then please quit/exit your browser software before leaving. This will decrease the possibility of anyone viewing your confidential information. No other users will be able to access your Card account information online without your User-ID and password.
A. Most probably, you are using Netscape browser software, version 4.0 or higher, with "disable cookies" chosen. For reasons described in "What are 'Cookies'? Do I need to accept them?" above, you should make the following changes: click on "Edit", then select "Preferences", then select "Advanced" (not the plus sign next to advanced). Finally, choose either "Accept only cookies that get sent back to the originating server" or "Warn me before accepting a cookie" and press "OK". This change will allow us to confirm your identity and send you confidential account information.
A. American Express believes strongly that we have a responsibilty to protect your confidential information to the best of our abilities. In order to securely access your Card account information [or Register for online services] via the Internet, we recommend you use the latest browser versions available. Access with Netscape versions before 1.12 (Mac or Unix) or 1.22 (Windows) is prohibited due to security concerns.