Staying safe online

Our websites are designed to ensure when you access your account or send us information it is secure

Image of young man using iPad


When you register and create an account for your student finance, we will provide you with a username (your Customer Reference Number). You will be asked to set a password and a security question and answer.

You can change your password and answer, at any time, through your online account. Always, choose a password and answer that you will remember, but will not be easily guessed by anyone else.

Tips for choosing a password

  • Don't use something that people can easily guess about you eg. your name, date of birth, or the town you are from
  • Always use a mixture of characters; letters and numbers
  • Don't use the same password for different accounts
  • Change your password regularly

Website security

  • When you log in your online account is protected by a secure encryption to keep your information safe. Our secure sites have addresses that start with 'https' and a small padlock icon in the status bar at the bottom of your browser window.
  • Double click the padlock symbol to view information confirming that the site is genuine.
  • Always log out of our site when you have finished using it, and close the browser window. This ensures that your user session is closed properly.
  • We recommend that when you visit any of our websites that you type the URL address into your browser. This ensures you are going to the correct site and not a spoof or fraudulent site.

Social networking

The nature of social networking sites such as facebook and twitter can create security risks. It is important to remain cautious when using them.

  • Always create strong passwords for online accounts and update them regularly on social media sites. Longer passwords (8-10 characters) that contain letters, numbers, and symbols are more secure. Avoid using the same password for multiple social media sites.
  • Be cautious of the information you post publicly such as your Customer Reference Number, address or date of birth. Use the site's privacy settings to limit who can see your personal information and posts.
  • Be careful who you befriend. You put yourself at risk by not taking the time to filter who you accept into your inner circle. Friend requests can be used by social bots to hack your network and by phishers trying to steal your personal information.
  • Stay up to date with changes to your social network's settings as small changes can cause big problems. If a site decides to changes it's privacy settings or policy this could leave your personal details more publicly available than they had been previously.
  • Review your social media profiles. Always consider how others may view the information you provide about yourself, your family and your friends and remember that social media sites are public resources.

Tell us

If you believe you have received any communication that is suspicious, or are concerned about the safety of your account please get in touch with us by email at

If you have responded to a phishing email you should change your account password and forward the email to our security team at
Please note we cannot respond to all emails sent.


  • Always use a unique password that contains a mixture of characters, letters and numbers and change regularly
  • Always check that web addresses start 'https' and a small padlock icon can be seen is in the status bar at the bottom of your browser window