U-choose Rewards Security Updates

Overview of Changes

We are making important updates to uChoose Rewards in the coming month:

Cardholder Multifactor Authentication

In keeping with industry cybersecurity best practices, we will enable multifactor authentication (MFA) for cardholders during sensitive uChoose Rewards processes on Tuesday, January 21, 2025.

After MFA is enabled, direct sign-on (DSO) and single sign-on (SSO) cardholders will be required to authenticate using a one-time passcode (OTP) to complete sensitive processes such as registration, password resets, and account linking. Depending on the cardholder’s selection, the OTP will either be sent to the email address or the mobile phone number on file. The Knowledge Article linked below provides additional details.

Note: Cardholders who do not have either a valid email address or a mobile phone number on file with uChoose will not be able to retrieve the OTP required to complete the selected uChoose function. They will instead receive a message directing them to contact their financial institution.

Removal of Chat Support 

Chat support on the Merchandise, Travel, and Gift Card redemption pages will be removed on Tuesday, December 31, 2024. Cardholders can still submit questions using the Help Center link at the bottom of the page. This change does not impact the cardholder’s ability to redeem points for Merchandise, Travel, or Gift Cards.

Cardholder Password Requirements Update

The password requirements for all cardholder users and admin users will be updated on Thursday, January 16, 2025, to provide optimal security. Beginning January 16, all passwords must contain at least 12 characters and at least:

• 12 or more characters
• At least one uppercase letter
• At least one lowercase letter
• At least one number
• At least one special character

All users will be required to update their passwords on their first log in to uChoose Rewards on or after January 16 to meet the new criteria.