Security information

Help us protect your data online

We work hard to ensure you’re safe and secure online.

We are committed to protecting the confidentiality, integrity, and availability of the information entrusted to us. Security and privacy are embedded throughout our services, systems, and operational processes to ensure that customer data is handled securely and in accordance with recognized industry standards and best practices.

Our website and supporting infrastructure are designed and operated in alignment with UK Government (HMG) and National Cyber Security Centre (NCSC) security requirements. The Teachers’ Pensions Service is covered under our ISO22301 certified Business Continuity process while our Information security management system is certified to ISO 27001:2022. These support in providing a structured, risk-based approach to protecting information assets and ensuring confidentiality, integrity, and availability of customer data on an ongoing basis.

In addition, we maintain Cyber Essentials Plus certification, which independently verifies that key technical security controls are effectively implemented to protect against cyber threats. Together, these certifications provide an independent assurance that security, resilience, and data protection are embedded throughout our people, processes, and technology.

We continually review and enhance our security posture to address emerging threats, evolving regulatory requirements, and industry best practices, providing our customers with confidence that their information is managed securely and responsibly.

And you can help us by making sure your details are kept up to date. Simply log in securely to your online account at www.teacherspensions.co.uk/login

If you don’t have an online account please sign up at www.teacherspensions.co.uk/register

 

Contacting us

The way we communicate with you has changed. All digital communications are now sent and received via our online secure Portal – My Pension Online (MPO).

Security is paramount to Teachers’ Pensions and this initiative is to ensure your data is securely managed and where possible eliminate non secure email.

If you don’t already have an MPO account please sign up here today. MPO is an online PIN protected portal that not only lets you contact us securely but also check and manage your personal pension information. You can complete a range of tasks including checking up on your Benefit Statement, updating your personal details, completing online forms and accessing a range of tools and calculators.

Don’t worry about checking your account; we’ll email you once we’ve replied to let you know there’s a message in your inbox.

 

Protect yourself from fraud and impersonation:

Fraudsters may attempt to impersonate our organisation by creating fake websites, emails, or messages that look genuine. These scams are designed to trick individuals into sharing personal information, login credentials, or financial details.

Before entering any personal information, ensure you:

Check the website address carefully and ensure it matches our official domain.
Are wary of subtle changes in domain names, such as replacing ".com" or ".co.uk" with similar-looking addresses, for example".corn" instead of ".com" or misspelled company names.
Avoid clicking links from unexpected emails, text messages, or social media posts.
Look for signs that the website is legitimate, such as secure connections ([https://]https://) and the correct organisation name. If in doubt, navigate to our website directly rather than following links from emails or messages.
 

Remember: Fraudsters often rely on small differences that can be easy to miss at first glance. Taking a moment to verify a website address can help protect your personal information and prevent fraud.

 

Keeping yourself safe

Follow these simple rules to keep safe online.

• Check a website is secure before you enter any details. Look for the ‘https’ at the start of the web address and the padlock next to the address bar.
• Keep your internet security software up to date, and run regular scans and system updates.
• Act with care when clicking links or downloading attachments from unsolicited emails.
• Remember never share personal or security information via email, web chat or on a website that’s been sent to you via email.
• Most importantly stay vigilant when emailing.

What should you do if you think you’ve received a scam email?

• Don’t click on any links in the scam email.
• Don’t reply to the email or contact the senders in any way.
• If you have clicked on a link in the email, don’t supply any information on the website that may open.
• Don’t open any attachments that arrive with the email.

If you think you’ve been a victim of fraud, report it to Action Fraud. Action Fraud is the UK’s national fraud and crime reporting centre. Alternatively, you can speak to an advisor on 0300 123 2040.