Skip To Content

Business Online Banking First-Time Login Instructions

New to ESL Business Online Banking?

Follow these step-by-step instructions to log in for the first time. Of course, if you have any additional questions, we’re here to help. Just call us at 585.336.1000 or 800.848.2265.

  • Begin by clicking on the Business tab on the login box in the upper left hand on our home page at esl.org. You should use the initial USER ID and password you received from us once you signed up for Business Online Banking.

  • Next, you will be asked to select a delivery method to receive a Secure Access Code. The Secure Access Code can be sent to you via email, voice call, or text.

  • Once you’ve received your Secure Access Code, enter it when prompted. Please note, the code is only valid for 20 minutes. If you receive a message that states your code has become invalid, use the back key and re-request a code be sent to you (via email, voice call, or text.)

  • Next, you will be asked if you would like to register your computer / device. Only register a device when you are the only user for that device. Do NOT register a device that you share with multiple users or is a public use device. Registering your device will allow you to bypass entering a Secure Access Code at future logins.

  • Next, you will be asked to create and confirm your password. Your password must meet the following criteria:
      • Password must be at least six characters long.
      • Password can be no more than 50 characters long.
      • Password must contain a minimum of one numbers.
      • Password must contain a minimum of one lower case characters.
      • Password must contain a minimum of one upper case characters.
    • You will see a Profile Page that includes information about you and your company. You’ll only be presented with this page during your first login, so please take a moment and verify that the information on this page is accurate and up to date.
      • Scroll to the bottom of the page and accept.
      • If you would like to update information on your profile page, please call us at 585.336.1000 or 800.848.2265.
    • Finally, you will be prompted to review and accept our Business Online Banking Agreement.

First-Time Login Instructions for Token Users

  • Begin by clicking on the Business tab on the login box in the upper left hand on our home page at esl.org. You should use the initial USER ID and password you received from us once you signed up for Business Online Banking.

  • Next, you’ll be prompted with an Enter your Secure Access Code message.

  • Your first log in will require entering two codes (future logins will not require entering a second code):
    • Enter the first code that appears on your Token.
    • Then, enter the second.
  • You will not be presented with an option to register the device; a code from your Token will be required at each log in.

  • If you receive an error message or become locked out, contact us so that we may confirm and reset your credentials.

That’s it! Now you’re ready to go.

Need a little more guidance? Keep reading for some first-time login FAQs.

Yes. Your new password must meet the following criteria:

  • Password must be at least six characters long.
  • Password can be no more than 50 characters long.
  • Password must contain a minimum of one number(s).
  • Password must contain a minimum of one lower case character(s).
  • Password must contain a minimum of one upper case character(s).

As part of your initial log in experience, your Secure Access Code will only be delivered to the contact information we received when you first submitted your request for Business Online Banking services. Once you have logged in successfully, you can add or edit Secure Access Code delivery methods by clicking on the Administration option from the left hand navigation, selecting Security Preferences and clicking on the option for Secure Access Code Delivery.

There could be several explanations for this:

  • If you opted to receive your Secure Access Code via text, enter the number that appears in the message portion of the text, not the number the text is sent from.

  • If you have requested the Secure Access Code be sent more than once, use the Secure Access Code you received last. For example, if you first requested it sent to an email address but then went back and requested it be sent by text, use the number sent to you via text.

  • Each Secure Access Code is unique and is only valid for 20 minutes. If you’re not able to enter the Secure Access Code within that time period, you will need to request that a new one be sent. To do so, use the back key and re-request a code be sent to you (via email, voice call, or text.)

Use the Secure Access Code via the delivery method you requested most recently.

The Secure Access Code is only valid for 20 minutes. If you’ve “timed out,” just hit the back button to begin again.

Clicking the back button when asked to Select a delivery method will return you to the initial log in screen. Just enter your USER ID and password and begin again.

Clicking the back button when asked to Enter your Secure Access Code BEFORE you have entered a code will return you to the Select a delivery method screen. Select a delivery method and enter the code you receive next.

No, every time you’re prompted to receive a Secure Access Code, you’ll be sent a new, unique number.

No, once you have logged in for the first time and have registered that device, you will not be prompted to enter a Secure Access Code. You will only be prompted to enter a Secure Access Code under these circumstances:

  • At initial login for a specific device (computer, laptop, tablet, and mobile).
  • When using an unregistered device.
  • When using a different browser.
  • When “cookies” are cleared from your device.

The Business Online Banking system features a Secure Access Code security feature keeps your accounts safe by adding another layer of security. This multi-layer authentication verifies your log in by validating user name, password, device, and browser before providing access. Feel free to register a device when you are the sole user (like your own computer at work or your tablet, etc.). This will allow you to bypass the Secure Access Code process for future logins. Do not register a device that has shared access.

Yes, you may register multiple devices (computer, laptop, tablet, and mobile). You will need to repeat the initial log in process for each device.