MOHELA Security Information

When you login to servicing.mohela.com make sure your address bar has green text which shows "Missouri Higher Education Loan Authority (Mohela)[US]". We invest in an extended validation certificate to ensure our customers know they are going to the secure MOHELA website.

Learn more about Extended Validation Certification  this link will open in a new window .

You will notice that if you try to login to your account from a computer not previously authorized, you will be presented with a challenge question (e.g. "What is the name of your first pet?"). We do this to make your account more secure so if a person obtains your password they will also have to know the answer to your security question to get into your online account. This is a standard practice for financial websites.

DNS is an essential tool for browsing the internet that is transparent to most people. However, under its normal implementation, DNS is not sufficiently secure. To mitigate this risk, MOHELA has deployed an enhanced version of DNS, known as DNSSEC, to protect our site from third party web spoofing and to give users assurance that they will always connect to the real servicing.mohela.com website.

Learn more about DNSSEC  this link will open in a new window .

MOHELA monitors systems internally and externally (when applicable) from an availability as well as a security perspective. We use multiple systems to ensure that systems are performing as expected and their integrity is maintained.

During the course of a year, MOHELA goes through multiple private and government audits which include our physical presence and information systems. This includes ongoing SSAE-18 assessments which show we have appropriate physical, logical, and process controls in place which were audited by a third party.

In response to security vulnerabilities identified in 2014, MOHELA has disabled the use of the older Secure Sockets Layer v3 protocol and requires the use of Transport Layer Security (TLS) for end user connections. This primarily impacts old browser versions, such as Internet Explorer 7 from Microsoft.

MOHELA will no longer support TLS 1.1 beginning December 15, 2016. We will continue to support TLS 1.2, which is supported by newer browsers including:

If you use an older browser, servicing.mohela.com may not function properly after the update. Please consider upgrading to a newer browser.

To determine which browser you are using, you can use a site like www.whatsmybrowser.org  this link will open in a new window .