An access control list, or ACL, enhances the security of your account by limiting what locations can access it. When a login attempt is made, each line of the ACL specifies a network location where the account can be accessed from. These lines are checked one by one, and if one of them matches, the account is allowed to be accessed if the username and password is correct. If none of the lines match the location the login attempt is coming from, regardless of the username or password entered, the login attempt will fail.

To create an ACL, you begin by clicking the "edit" link beside "Account Access Control" section of the security module, depicted on the previous page.

This brings you to the form for setting up the ACL, as shown above. In the large text box you enter the designations for the network locations you want able to access your member account. Below that you specify what information our support department should require to override the ACL. This is necessary in case you get locked out of your account due to some error or a change in IP address, but naturally must only be done if we can be certain it is the account holder we are speaking to. In this form you can specify whether we should use the secret questions and answers from the account as authorisation to override the ACL, or if you want to specify a separate "token," which is used like a password to allow the override of the ACL by our support staff.

The final setting on the page asks you if you want the system to test the ACL based on where you are currently logged in from. This ensures that you cannot create an ACL which would lock out the connection you made the ACL through. If you are at a location from where you would expect to be able to access the account, this should be set to "yes."