
Vanguard's security audit email lets customers fix weaknesses in under an hour. One client described the process and a missing ACATS lock.
Vanguard sent a security audit email to its customers this week, urging them to check their account profiles. One client who clicked the button at 11:32 a.m. on July 29 said he completed every suggested upgrade within 60 minutes, moving his account status from “Great” to “Excellent.”
The audit presented a 10-item scorecard, rating each security measure as red, yellow, or green. The client said he had roughly four yellow items to fix. He followed each hyperlink, implemented the recommended changes, and turned the entire scorecard green by 12:38 p.m.
Among the upgrades he enabled: biometric authentication (fingerprint and Face ID), a pass-code generator (replacing SMS-based codes), and a lock on outgoing money transfers. The lock prevents unauthorized transfers without blocking the client’s own outgoing movements, he said. That feature alone addressed a concern he had after listening to a ChooseFI podcast about the importance of an ACATS lock.
The audit does not, however, cover the ACATS lock itself. The client said he had to set that up separately. An ACATS lock prevents unauthorized transfer of securities to another brokerage, a different mechanism from the outgoing-money-transfer lock Vanguard offers.
He also took the opportunity to update his phone’s security settings. After resetting a fingerprint scan, he found additional Samsung security recommendations and turned those green as well.
“I couldn’t be happier with how smoothly it went,” the client said. He recommended that all Vanguard users click the “Check your profile” button in the email, or log in directly and search for security settings if they did not receive the message.
Vanguard’s audit comes as financial firms face growing pressure to improve account security, particularly with advances in AI creating new attack vectors. The company did not immediately respond to a request for comment on the audit’s rollout or the missing ACATS feature.
Prepared with AlphaScala editorial tooling from the source reporting linked above. Indexable analysis may include a cited Alpha Score value. Publishing checks screen each story before release. Educational coverage, not personalized advice.