Ways you can protect yourself and help us protect you

1. Register your account with a unique username and complex password.
2. Provide us with all your emails and phone numbers for security alerts.
3. Use a password manager.
4. Use multifactor authentication (MFA).
5. Don’t share your username or password.
6. Let us know if you’ve experienced unusual activity, including an email takeover or identity theft, so we can put additional protections on your account.
7. Pay attention to security alerts.
8. Log in to your account frequently (at least every 90 days).

We provide multiple levels of security protection

We encrypt your data

Empower encrypts all sensitive data at rest (stored) and in transit so no one other than those with a need to know have access to your data.

We don’t sell your data

Empower takes your privacy very seriously and is committed to protecting and respecting the privacy, security and integrity of your personal information. You are our priority, not your data.

We partner with cybersecurity leaders to keep your data safe

Empower uses several external services to provide independent security evaluations and test our defense-in-depth protections frequently. These include third-party external auditors performing attestations to produce an annual SOC 1 Type 2 financial report, an annual SOC 2 Type II report, an annual Verizon Business Enterprise Risk Program Certification, annual penetration tests, ongoing cybersecurity and privacy trainings for associates, dark web monitoring, and ongoing business resiliency tabletop and failover exercises. Yearly results of these valuations have been excellent.

We send you security alerts if there’s unusual activity on your account

If we see unusual activity on your account, we will proactively send you security alerts via all points of contact that we have for your account. We may suggest additional protections after consulting with you.

A solid track record

Empower has earned 41 top ratings and commendations from our customers in an annual survey from PLANSPONSOR Magazine.¹ We are dedicated to providing the best customer service and the best cybersecurity protection in the industry.

Who protects your accounts?

Our security, fraud and privacy departments are closely aligned business units that continuously collaborate for your protection.

Empower’s cybersecurity program is led by our chief information security officer (CISO), who establishes and maintains the vision, strategy and operation of the cybersecurity program. Our CISO leads teams that manage corporate information security policies, security awareness and training, numerous forms of risk assessments, threat and vulnerability assessments, security architecture, security incident management, and enterprise resiliency — all designed and tested to protect your retirement savings.

Empower’s client fraud protection group provides the controls, processes and risk-reduction oversight needed to monitor accounts, financial transactions and accounting documents — and analyzes the data to identify and protect against fraudulent activity.

Empower’s privacy team ensures data is collected, used and shared in compliance with state and federal privacy laws as well as the privacy expectations of our customers.

We stand by our security with the Empower Security Guarantee

A partnership with Empower is built on a foundation of trust — the security of your data is critical to the success of our business. That’s why in addition to our extensive security measures, the Empower Security Guarantee affirms our promise to restore account losses resulting from unauthorized transactions that occur through no fault of your own. Information regarding the Empower Security Guarantee appears on our website so you’re aware of our commitment and how it works.