Before you type anything, check the website address at the top of your browser window. It must say "https://login.flexiti.com/account/login"
Change it now by entering your Flexiti username. Your 16-digit FlexitiCard® number is no longer accepted as your Flexiti username.
Your session is secure
During the account opening process, the information you provide to us is encrypted using Secure Socket Layer (SSL) technology. SSL protects information as it crosses the Internet. To support this technology, you need an SSL-capable browser.
How can I tell if a webpage is secure?
You can tell if you are visiting a secure area within a website by looking for the padlock symbol on the status bar at the bottom of your browser screen, or in the URL address at the top of the screen. When the padlock is in the locked position, your session is connected to a secure server. Note: if you are using an encrypted browser and you do not see the secured connection symbol during the Questrade online application process, you may have entered the site through a connection that is not secure. To re-enter the site through a secure connection, go to our home page and click the login tab at the top of the page and select myQuestrade.
What can I do to protect myself?
You should only use browsers that use strong encryption and security features such as Microsoft Edge. Visit Microsoft to download the latest version. Important: we do not recommend beta browser versions.
Before you type anything, check the website address at the top of your browser window. It must say "https://login.flexiti.com/account/login"
Make sure the website's domain name is correct. It must be spelled "Flexiti". Phishing sites often use slight misspellings, hyphens, or extra words.
Beside the "https://" at the very beginning of the address, look for the padlock or site information button. This confirms the connection is secure.
If you're unsure, close the page and type the official website address (www.flexiti.com) directly into your browser instead of searching for it. Avoid clicking on links from emails, text messages, or even search engines that ask for your login details.