Ecrypted connection and security certificates

Learn about solutions making online banking secure

Encrypted connection
and SSL protocol

Encrypted connection
and SSL protocol

The security of the Millenet system is guaranteed by encrypted transmission between your computer and Bank server. The transmission is proptected by 128-bit SSL protocol. The information about the encryption is visible in the https:// prefix at the begining of the website address.

Millennium Bank uses GeoTrust True BusinessID SSL certificate guaranteed by GeoTrust, a renowned company specializing in encrypting and data security. This protection method prevents any unauthorized access to your confidential data. What is more, the certificate ensures that the login page belongs to the institution mentioned in the certificate, i.e. to Bank Millennium.

How to check certificate?

In most browsers, on the left or right side of the address bar you'll see a padlock icon. The padlock should be locked. click on it to display the security certificate and make sure your connection is safe and the website administered by Bank Millennium.

See how the certificate may look like
in different browsers:

PDF documents security certificates


Each PDF document downloaded from Millenet is encrypted with Bank Millennium security certificate. Therefore, you can easily verify whether anybody has interfered with its content after signing.

Bank Millennium uses 4 certificates in order to sign PDF documents. All of them have the same parameter "O" (Organisation) Bank Millennium S.A and other information which create a unique digital signature.

How to verify the authenticity of a certificate?

The following instructions apply to the Adobe Acrobat Reader DC

  1. 1

    Download PDF document from Millenet and open it by Adobe Acrobat Reader . You can download free Adobe Acrobat Reader DC software from Adobe.com.

  2. 2

    Select Signature Panel in the upper right corner of the document and then right-click on the certificate's name Rev 1: Signed by... and choose Show Signatures Properties...

  3. 3

    In this dialog box click on Show signer's Certificate

  4. 4

    In Details tab you can check the document's certificate. Compare this data with 4 certificates which Bank Millennium uses to sign PDF documents. You can find them below.

  5. 5

    One of the four certificates below must simultaneously meet all of the following data: Subject, Issuer, Serial numer, SHA1 digest.

Certificates used by Bank Millennium

Checksum

  • Documents in Information about changes section in Millenet have their own, unique checksum (cryptographic hash function SHA 256, SHA being short for Secure Hash Algorithm). Any changes to the document will result in the change of the checksum.

    Documents in Information about changes section in Millenet are signed by the Bank Millennium with the electronic certificate. The signature includes an embedded Timestamp.

  • In order to let you check the integrity and authenticity of the documents in Information about changes section, we send text messages with first four and last four characters of the checksum. This way you can be sure to always be in possession of uncorrupted and unchanged documents.

  • You can check the checksum of any document (SHA 256 function) in the following ways:

    Method 1 – Windows:

    1. Run Windows PowerShell from Applications.
    2. In command line type „Get-FileHash -Path z:\desktop\file.jpg -Algorithm SHA256”.
    3. Change file path from „z:\desktop\file.jpg” to the path of a file for which you want to verify checksum.
    4. Select Enter.
    5. The application will run through SHA-256 cryptographic function and output it for you.
    6. Compare the checksum from the SMS with the checksum from the Windows PowerShell. If they are the same, the document downloaded from Millenet is original and has never been changed.

     

    Method 2 – Windows:

    1. Download document from Information about changes section in Millenet.
    2. Hover your mouse over the document icon and click the right mouse button.
    3. Choose options: CRC SHA and SHA-256 from the displayed menu.
    4. A new window will show checksum calculated by the function SHA-256.
    5. Compare the checksum from the SMS with the checksum from the window above. If they are the same, the document downloaded from Millenet is original and has never been changed.

     

    Method 3:

    1. Run the Internet website, which allows you to verify the checksum (using the SHA-256 function) for a given document.
    2. Send the downloaded document to the website from the point above.
    3. This website will show checksum calculated by the function SHA-256.
    4. Compare the checksum from the SMS with the checksum from the website. If they are the same, the document downloaded from Millenet is original and has never been changed.

     

    Method 4 – Mac OS:

    1. Run Terminal from Spotlight, Launchpad or Programs > Tools.
    2. Type „shasum –a 256” and after space type path of a file for which you want to verify checksum.
    3. The application will run through SHA-256 cryptographic function and output it for you.
    4. Compare the checksum from the SMS with the checksum from the Terminal. If they are the same, the document downloaded from Millenet is original and has never been changed.

     

    Method 5 – Linux:

    1. Run the Terminal.
    2. Type path of a file for which you want to verify checksum i.e. „cd download_directory”.
    3. Then type „sha256sum foto.jpg” where „foto.jpg” is the name of a file for which you want to verify checksum.
    4. Select Enter.
    5. The application will run through SHA-256 cryptographic function and output it for you./li>
    6. Compare the checksum from the SMS with the checksum from the Terminal. If they are the same, the document downloaded from Millenet is original and has never been changed.

Are you a victim of fraud or want to report suspicious situation?

  1. Write to us

    Fill in the form

  2. or call security helpline

    22 598 44 44