Phishing attempts against PennKey credentials have been increasing. Here are some tips to quickly verify you are on the authentic weblogin page.
Verify the URL
Web authentication for PennKey credentials should only come from:
https://weblogin.pennkey.upenn.edu/Note: By confirming the trailing / in the domain name, you can ensure you are on a upenn domain.
Verify you are on a Secure Page
WebLogin will only request your credentials from a secure page. The page URL will always be prefixed with https://. In addition, the WebLogin pages use an extended validation certificate. The display of extended validation certification is different across
browsers, but typically have the following qualities:
A text description showing the owner of the certificate: "University of Pennsylvania"
A green color in the address bar.
Below are some examples of extended validation certificate displays in common browsers:
FireFox (Version: 27.0.1)