Penn Computing

Penn Computing

Computing Menu Computing A-Z
Computing Home Information Systems & Computing Penn

Confirming a WebLogin Page is Legitimate

Phishing attempts against PennKey credentials have been increasing. Here are some tips to quickly verify you are on the authenticate weblogin page.


Verify the URL

Web authentication for PennKey credentials should only come from:

https://weblogin.pennkey.upenn.edu/

Note: By confirming the trailing / in the domain name, you can ensure you are on a upenn domain.

Verify you are on a Secure Page

WebLogin will only request your credentials from a secure page. The page URL will always be prefixed with https://. In addition, the WebLogin pages use an extended validation certificate. The display of extended validation certification is different across browsers, but typically have the following qualities:

  1. A text description showing the owner of the certificate: "University of Pennsylvania"
  2. A green color in the address bar.

Below are some examples of extended validation certificate displays in common browsers:

FireFox (Version: 27.0.1)



Google Chrome (Version: 33)



Safari (Mac OS X 10.9 Version: 7.0.1)



Internet Explorer (Version: 10)




Service Alerts

top

Information Systems and Computing
University of Pennsylvania
Comments & Questions


Penn Computing University of Pennsylvania
Information Systems and Computing, University of Pennsylvania