Common use of Internet Security Clause in Contracts

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, Passcode, and then choose a Passcode security image that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution CB&S Bank nor its Service Providers have access to this information. The Service will automatically deactivate your account after three multiple unsuccessful login attempts within a 24-hour time frameattempts. You may reset Contact Customer Service for assistance in resetting your passcode online or you may contact this Institution for assistancePasscode. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use words based on your name, address address, social security number, birthday, or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. • Do not use the same Passcode that you use for any other website. • Do not disclose your Access ID or Passcode to third party account aggregation Service Providers. NEITHER THIS INSTITUTION CB&S BANK NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY. Encryption - The Service uses the Secure Socket Layer (SSL) encryption technology. Your browser automatically activates this technology when it attempts to connect to our Service. The Service requires a browser that supports 128-bit encryption. The Service will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock from “open” to “locked.” What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Service have been certified by a Certificate Authority to assure you that you are actually talking to the Service instead of someone pretending to be us. If you are using an older browser, you will see that the Certificate Authorities key may have expired; you will need to update your browser. By clicking on the lock within the Service, you can view the certificate to ensure it is valid. Cookies - During your use of the Service, our Internet Banking Service Provider will pass an encrypted cookie to your computer in order to identify your computer during the session. This cookie enables us to process multiple transactions during the session without having to provide an Access ID and Passcode for each individual transaction. Users must accept this cookie to use the Service. This cookie does not contain any personal information; it simply provides another level of security for our Internet Banking product. The cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. When you log off, close your browser, or turn off your machine, the cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Additional Security Guidelines: • All Authorized Users should sign-off after every Service session; however, online sessions will automatically end after a period of inactivity. This to protect you in case you accidentally leave your computer unattended after you log-in. • The security of public computers (e.g. in a library, or Internet café) cannot be assured; therefore we recommend that you refrain from accessing the Service on a public computer. • Routinely scan your computer, servers, and electronic media using a reliable virus detection product. Undetected or un-repaired viruses may corrupt and destroy your programs, files, and even your hardware. Additionally, you may unintentionally transmit a virus to other computers. Use a firewall product (hardware and/or software), especially if you have a broadband Internet connection such as DSL or cable modem. Periodically update your computer operating system and browser for critical security related patches. We recommend use of the most current, fully patched, versions of Internet browsers for accessing the Service. Business Internet Banking Customers may be subject to additional security requirements as detailed in separate agreements.

Internet Security. ‌ The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Electronic Services Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Internet Banking Service. Access User IDs and Passcodes Passwords - One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) User ID and PasscodePassword. During the enrollment process, you will be asked to select a unique Access User ID and Password. For security purposes, do not use your account number or social security number as your User ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Password within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Password, you may use our online automated Password reset feature or you may contact this Institution Mocse for assistance. assistance.‌ Because your Passcode Password is used to access your accounts, you should treat it as you would any other sensitive personal data. • data.‌  You should carefully select a Passcode Password that is hard difficult to guess. • guess.‌  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode Password safe. •  Memorize your Passcode Password and do NOT write it down. •  You should also change your Passcode Password occasionally, such as every 90 days. • A Passcode  Passwords should not be changed shared with anyone.  The Change Password screen within the Internet Banking Service defines the rules for creating a new Password. When you enroll for the Internet Banking Service you agree to change your Password immediately if you suspect that your Passcode Password has been compromised. This can be done at any time from the “User ServicesOptions” menu after you log on to the Service. Internet Banking Service.‌ NEITHER THIS INSTITUTION MOCSE NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS USER ID, PASSWORD, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US IMMEDIATELY.OUR ELECTRONIC SERVICES DEPARTMENT IMMEDIATELY.‌ Encryption - The Internet Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Internet Banking Service. The Internet Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement.‌ Certificate Authority- The servers hosting the Internet Banking Service have been certified by a certificate authority to assure you that you are actually talking to the Internet Banking Service instead of someone pretending to be us. By clicking on the lock within the Internet Banking Service, you can view the certificate to ensure it’s valid.‌ Cookies -During your use of the Internet Banking Service, our Internet banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide an User ID and Password for each individual transaction. You must accept this cookie to use the Internet Banking Service. The session cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or “permanent” cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer’s hard drive until you clear cookies with your browser.‌ Multi-Level Authentication- We use multi-level authentication (or enhanced security) to help prevent unauthorized access to your accounts. As part of our enhanced security solution we may ask you to select challenge questions which may be used to help verify your identity in the event unusual login or transaction activity is detected. We may also send you a One Time PIN (Authorization Code) which can be used to help authenticate your login or transaction requests.‌

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-24- hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User ServicesSettings” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department the Bank will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs User Names and Passcodes Passwords - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) Username and PasscodePassword. During the enrollment process, you will be asked to select a unique Access IDUsername, and then choose a Passcode Password that will be used to gain access to the Service. You determine your own PasscodePassword, which is encrypted in our database. Neither this Institution the Bank nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution the Bank for assistance. Because your Passcode Password is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode Password that is hard to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode Password safe. • Memorize your Passcode Password and do NOT write it down. • You should also will be required to change your Passcode occasionallyPassword every 6 months (Passwords cannot be changed through Mobile App; however, such as every 90 dayswe recommend you change your password more frequently. • A Passcode Password should be changed immediately if you suspect that your Passcode Password has been compromised. This can be done at any time from the “User ServicesProfile” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONNeither the Bank nor its service providers will contact you via telephone or email requesting personal information, YOUR ACCESS IDyour username, OR YOUR PASSCODEor your password. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATIONIf you are contacted by anyone requesting this information, PLEASE CONTACT US IMMEDIATELYplease contact us immediately. Encryption – The Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Service. The Service requires a browser that supports 128-bit encryption. The Service will warn you if your browser does not meet this requirement. Certificate Authority - The servers hosting the Service have been certified by a Certificate Authority to assure you that you are actually talking to the Service instead of someone pretending to be us. If you are using an older browser, such as anything prior to version Internet Explorer 11, you will see that the Certificate Authorities key may have expired; you will need to update your browser. Instructions for upgrading your browser are located on the Browser SSL Update link, which is located on the Service login page. By clicking on the lock within the Service, you can view the certificate to ensure it’s valid. Cookies - During your use of the Internet Banking Service, our Internet Banking Service Provider will pass an encrypted cookie to your computer in order to identify your computer during the session. This cookie enables us to process multiple transactions during the session without having to provide a Username and Password for each individual transaction. Users must accept this cookie to use the Service. This cookie does not contain any personal information; it simply provides another level of security for our Internet banking product. The cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. When you log off, close your browser, or turn off your machine, the cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Mobile Banking does not pass any cookies to your mobile device.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode that is hard to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode safe. •  Memorize your Passcode and do NOT write it down. •  You should also change your Passcode occasionally, such as every 90 days. •  A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Internet Banking Service. Access IDs and Passcodes - One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) ID and Passcode. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Passcode, you may use our online automated Passcode reset feature or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • ! You should carefully select a Passcode that is hard difficult to guess. • ! You should not use words based on your name, address or other personal information. • ! Special characters may be used to increase security. • ! Do NOT use dictionary words. ! Keep your Passcode safe. ! Memorize your Passcode and do NOT write it down. ! You should also change your Passcode occasionally, such as every 90 days. ! Passcodes should not be shared with anyone, even Authorized Users. ! The “Help” link within the Internet Banking Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also When you enroll for the Internet Banking Service you agree to change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Internet Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR INTERNET BANKING DEPARTMENT IMMEDIATELY. Encryption – The Internet Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Internet Banking Service. The Internet Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from “open” to “locked”. What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Internet Banking Service have been certified by a certificate authority to assure you that you are actually talking to the Internet Banking Service instead of someone pretending to be us. By clicking on the lock within the Internet Banking Service, you can view the certificate to ensure it’s valid. Cookies - During your use of the Internet Banking Service, our Internet banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide an Access ID and Passcode for each individual transaction. You must accept this cookie to use the Internet Banking Service. The session cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or “permanent” cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer’s hard drive until you clear cookies with your browser. If you do not accept these cookies, you may not be able to use all the features of the Internet Banking Service. Multi-Level Authentication - We use multi-level authentication (or enhanced security) to help prevent unauthorized access to your accounts. As part of our enhanced security solution we may ask you to select challenge questions which may be used to help verify your identity in the event unusual login or transaction activity is detected. We may also send you a One Time PIN (OTP) which can be used to help authenticate your login or transaction requests.

Internet Security. The Online Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Online Banking Service, our Internet Banking Deposit Operations Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Online Banking Service. Access IDs and Passcodes - One of the main security features protecting the Online Banking Service is the unique combination of your Access Identification Code (Access ID) , Passcode, and PasscodeLogin Image and Phrase. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Passcode, you may use our online automated Passcode reset feature or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard difficult to guess. • You should not use words based on your name, address or other personal information. • Special Numbers and special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can rememberwords in any language. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcodes should not be shared with anyone, even Authorized Users. • The "Help" link within the Online Banking Service will offer tips on choosing a secure Passcode should be changed that you can remember. When you enroll for the Online Banking Service you agree to change your Passcode immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” "Preferences" menu after you log on to the Online Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, E-MAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CARD NUMBER, OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR DEPOSIT OPERATIONS DEPARTMENT IMMEDIATELY. Encryption: The Online Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Online Banking. Your browser automatically activates this technology when it attempts to connect to our Online Banking Service. The Online Banking Service requires a browser that supports 128-bit encryption. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from "open" to "locked". What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority: The servers hosting the Online Banking Service have been certified by a certificate authority to assure you that you are actually talking to the Online Banking Service instead of someone pretending to be us. By clicking on the lock within the Online Banking Service, you can view the certificate to ensure it's valid.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department department will verify your identity and authorization authori- zation against information associated with the Eligible Account (saccount(s) that you request to be linked tied to the Serviceservice. Access IDs ids and Passcodes - passcodes – One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have No one at Gesa or at FundsXpress, our service provider, has access to this information. The Our Service also uses a program called a “Passcode cracker” that will automatically deactivate your account after three unsuccessful login attempts within help you select a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistancegood Passcode. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You xxxx.Xxx should carefully select a Passcode that is hard to guess. • You should not use .The Passcode cracker will encourage you to stay away from words based on your name, address or other personal information. • Special All pass codes must have seven characters may be used to increase security. • Do NOT use dictionary wordsor more and have at least 1 alpha and 1 numeric character in it. The “Help” link within the Service will offer provide helpful tips on choosing to help you select a secure Passcode that you can remembergood Passcode. • Keep your Passcode safe. • No Gesa Credit Union employee or FundsXpress employee will contact you via telephone or via email requesting your access ID or Passcode. If you are contacted by anyone requesting this information, please contact us immediately. Memorize your Passcode and do NOT not write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User the“User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONIf you disclose your passcode to anyone, YOUR ACCESS IDand/or if you allow them to use the passcode to access your accounts, OR YOUR PASSCODEyou are authorizing them to act on your behalf and you will be responsible for any use of the system by them (i. e., such as when you provide this informa- tion to a joint account holder and/or an aggregation service provider). IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATIONBy accepting the terms of this agreement you acknowledge your responsibility for protecting the confidentiality and security of your passcode and access ID and you agree to change it periodically. You agree that we are authorized to act on instructions received under your password and you understand that we will not be liable for any losses resulting from your permitting other persons to use your Access ID and Passcode to access the Service. Log-on Security – To help prevent unauthorized access to your accounts your online session will end if we detect no activity for 10 minutes. This is to protect you in case you accidentally leave your computer unattended after you logged on. When you return to your computer, PLEASE CONTACT US IMMEDIATELYyou will be prompted to re-enter your Passcode, and your session will continue where you left off. In addition, we will deactivate your account after three unsuccessful login attempts. encryption – The Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet Banking. Your browser automatically activates this technology when it attempts to connect to our Service. We currently require the use of a browser that supports at least 128-bit encryption. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appear- ance of a small icon of a padlock at the bottom of the screen from open to locked.What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. certificate Authority – The servers hosting our Service at FundsXpress have been certified by a“Certificate Authority”to assure you that you are actually talking to FundsXpress instead of someone pretending to be FundsXpress. If you are using an older browser, such as anything prior to versions 4.0 on Netscape Navigator or Internet Explorer, you will see that the“Certificate Authorities”key may have expired; you will need to update it on your xxxxxxx.Xxx can obtain instructions on how to do this by clicking on the Browser SSL Update link located on the Internet Banking Service login page. cookies – During your use of the Service, FundsXpress will pass an encrypted cookie to your computer in order to identify your computer during the session. This cookie does not identify you personally. FundsXpress does not (and cannot) use cookies to collect or obtain new personal information about you. This Internet Banking cookie simply allows FundsXpress to process multiple transactions during your session without requiring you to re-enter your Passcode for each individual transaction. This cookie simply provides another level of security for our Internet banking product. The cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. When you log off, close your browser, or turn off your machine, the cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. In addition to the security features described above, there may be other security related notices posted on our website or Internet Banking Service from time to time. It is your responsibility to read all security notices. Notwithstanding our efforts to ensure that the Service is secure, we cannot and do not warrant that all data transfers via the Service will be free from monitoring or access by others.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution logon credentials by contacting Frontier Bank for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes Login Names, Passwords, Images & Passphrases - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) Login Name, Password and PasscodePersonal Image and Passphrase. During the enrollment process, you will be asked to select a unique Access IDLogin Name, Password, Image and then choose a Passcode Passphrase that will be used to gain access to the Service. You determine your own PasscodePassword, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistanceto reset your password. Because your Passcode Password is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode Password that is hard to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode Password safe. •  Memorize your Passcode Password and do NOT write it down. •  You should also change your Passcode Password occasionally, such as every 90 days. •  Passwords should not be shared among authorized users.  A Passcode Password should be changed immediately if you suspect that your Passcode Password has been compromised. This can Call the bank to request your password be done at any time from the “User Services” menu after you log on to the Servicechanged. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL E-MAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS IDLOGIN NAME, OR YOUR PASSCODEPASSWORD. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department we will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Internet Banking Service. Access IDs and Passcodes - One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) ID and Passcode. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Pass code, you may use our online automated Passcode reset feature or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard difficult to guess. • You should not NOT use words based on your name, address or other personal information. • Special characters may Passcodes should not be used to increase securityshared with anyone, even Authorized Users. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also will be prompted to change your password every six (6) months When you enroll for the Internet Banking Service you agree to change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” Services menu after you log on to the Internet Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR CUSTOMER SERVICE DEPARTMENT IMMEDIATELY. Encryption - The Internet Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Internet Banking Service. The Internet Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session with the appearance of a small icon of a locked padlock. What this means to you is that your communications are scrambled from your browser to our servers at all times to minimize the risk of any unauthorized party reading the information as it is carried over the Internet. Certificate Authority - The servers hosting the Internet Banking Service have been certified by a certificate authority to help assure you that you are actually talking to the Internet Banking Service instead of someone pretending to be us. By clicking on the lock within the Internet Banking Service, you can view the certificate to ensure it's valid. Cookies - During your use of the Internet Banking Service, our Internet banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide an Access ID and Passcode for each individual transaction. You must accept this cookie to use the Internet Banking Service. The session cookie is stored on your computer's hard drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or permanent cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer's hard drive until you clear cookies with your browser. If you do not accept these cookies, you may not be able to use all the features of the Internet Banking Service. Multi-Level Authentication - We use multi-level authentication (or enhanced security) to help prevent unauthorized access to your accounts. As part of our enhanced security solution, we may ask you to select challenge questions which may be used to help verify your identity in the event unusual login or transaction activity is detected. We may also send you a One Time PIN (OTP) which can be used to help authenticate your login or transaction requests.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department department will verify your identity and authorization authori- zation against information associated with the Eligible Account (saccount(s) that you request to be linked tied to the Serviceservice. Access IDs and Passcodes - – One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have No one at Gesa or at FundsXpress, our service provider, has access to this information. The Our Service also uses a program called a “Passcode cracker” that will automatically deactivate your account after three unsuccessful login attempts within help you select a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistancegood Passcode. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use The Passcode cracker will encourage you to stay away from words based on your name, address or other personal information. • Special All pass codes must have seven characters may be used to increase security. • Do NOT use dictionary wordsor more and have at least 1 alpha and 1 numeric character in it. The “Help” link within the Service will offer provide helpful tips on choosing to help you select a secure Passcode that you can remembergood Passcode. • Keep your Passcode safe. • No Gesa Credit Union employee or FundsXpress employee will contact you via telephone or via email requesting your access ID or Passcode. If you are contacted by anyone requesting this information, please contact us immediately. Memorize your Passcode and do NOT not write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONIf you disclose your passcode to anyone, YOUR ACCESS IDand/or if you allow them to use the passcode to access your accounts, OR YOUR PASSCODEyou are authorizing them to act on your behalf and you will be responsible for any use of the system by them (i. e., such as when you provide this informa- tion to a joint account holder and/or an aggregation service provider). IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.By accepting the terms of this agreement you acknowledge your responsibility for protecting the confidentiality and security of your passcode and access ID and you agree to change it periodically. You agree that we are authorized to act on instructions received under your password and you understand that we will not be liable for any losses resulting from your permitting other persons to use your Access ID and Passcode to access the Service. Log-On Security – To help prevent unauthorized access to your accounts your online session will end if we detect no activity for

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Internet Banking Service. Access IDs and Passcodes - One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) ID and Passcode. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Passcode, you may use our online automated Passcode reset feature or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You •You should carefully select a Passcode that is hard difficult to guess. • You •You should not use words based on your name, address or other personal information. • Special •Special characters may be used to increase security. • Do •Do NOT use dictionary words. The •Keep your Passcode safe. •Memorize your Passcode and do NOT write it down. •You should also change your Passcode occasionally, such as every 90 days. •Passcodes should not be shared with anyone, even Authorized Users. •The “Help” link within the Internet Banking Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also When you enroll for the Internet Banking Service you agree to change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Internet Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONNeither this Institution nor its Service Providers will contact you by telephone, YOUR ACCESS email or text messaging requesting personal information, such as your Access ID, OR YOUR PASSCODEPasscode, credit card number, ATM Card Number or ATM Pin. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATIONIf you are contacted by anyone requesting this type of information, PLEASE CONTACT US IMMEDIATELYdo not provide any information and contact our internet banking department immediately. Encryption - The Internet Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Internet Banking Service. The Internet Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from “open” to “locked”. What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Internet Banking Service have been certified by a certificate authority to assure you that you are actually talking to the Internet Banking Service instead of someone pretending to be us. By clicking on the lock within the Internet Banking Service, you can view the certificate to ensure it’s valid. Cookies - During your use of the Internet Banking Service, our Internet banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide an Access ID and Passcode for each individual transaction. You must accept this cookie to use the Internet Banking Service. The session cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or “permanent” cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer’s hard drive until you clear cookies with your browser. If you do not accept these cookies, you may not be able to use all the features of the Internet Banking Service. Multi-Level Authentication - We use multi-level authentication (or enhanced security) to help prevent unauthorized access to your accounts. As part of our enhanced security solution we may ask you to select challenge questions which may be used to help verify your identity in the event unusual login or transaction activity is detected. We may also send you a One Time PIN (OTP) which can be used to help authenticate your login or transaction requests.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access Access/User IDs and Passcodes Passcodes/Passwords - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have has access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Greeting & Passphrase - An additional security feature is the use of an image that you select from an assortment and a passphrase that you enter. Neither this Institution nor its Service Provider has access to this information. Upon your login, if the image or the passphrase are not the ones you selected, immediately exit the Service and close your browser. Contact CSB to report the trouble. Because your Passcode Passcode/Password is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode that is hard to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used required to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode safesafe and do not share it with anyone. •  Memorize your Passcode and do NOT write it down. •  You should also change your Passcode occasionally. Periodically, such as every 90 daysyou will be required to change your Passcode. •  A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Servicessettings” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING YOUR PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Online Banking Department Agent will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access Login IDs and Passcodes Passwords - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) Login ID and PasscodePassword. During the enrollment process, you will be asked to select a unique Access Login ID, and then choose a Passcode Password that will be used to gain access to the Service. You determine your own PasscodePassword, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode password online or you may contact this Institution for assistance. Because your Passcode Password is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode Password that is hard to guess. guess • You should not use words based on your name, address or other personal information. information • Special characters may be used to increase security. security • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. words • Keep your Passcode safe. Password safe • Memorize your Passcode Password and do NOT write it down. down • You should also change your Passcode Password occasionally, such as every 90 days. days • A Passcode Password should be changed immediately if you suspect that your Passcode Password has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONNeither this Institution nor its Service Providers will contact you via telephone or email requesting personal information, YOUR ACCESS your Login ID, OR YOUR PASSCODEor your Password. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATIONIf you are contacted by anyone requesting this information, PLEASE CONTACT US IMMEDIATELYplease contact us immediately. Encryption – The Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Online Banking. Your browser automatically activates this technology when it attempts to connect to our Service. The Service requires a browser that supports 128-bit encryption. The Service will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from “open” to “locked”. What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Service have been certified by a Certificate Authority to assure you that you are actually talking to the Service instead of someone pretending to be us. If you are using an older browser, such as anything prior to versions 4.0 on Netscape Navigator or Internet Explorer, you will see that the Certificate Authorities key may have expired; you will need to update your browser. Instructions for upgrading your browser are located on the Browser SSL Update link, which is located on the Service login page. By clicking on the lock within the Service, you can view the certificate to ensure it’s valid. Cookies - During your use of the Service, our Online Banking Service Provider will pass an encrypted cookie to your computer in order to identify your computer during the session. This cookie enables us to process multiple transactions during the session without having to provide a Login ID and Password for each individual transaction. Users must accept this cookie to use the Service. This cookie does not contain any personal information; it simply provides another level of security for our Online Banking product. The cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. When you log off, close your browser, or turn off your machine, the cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Additional Security Guidelines: • All Authorized Users should sign-off after every Service session; however, online sessions will automatically end after fifteen (15) minutes of inactivity. This is to protect you in case you accidentally leave your computer unattended after you log-in. • The security of public computers (e.g. in a library, or Internet café) cannot be assured; therefore we recommend that you refrain from accessing the Service on a public computer. • Routinely scan your computer, servers, and electronic media using reliable virus detection and anti-spyware products. Undetected or un-repaired viruses or spyware may affect the performance of your computer, corrupt and destroy your programs, files, and even your hardware. Additionally, you may unintentionally transmit sensitive data to another third party or transmit a virus to other computers. • Use a firewall product (hardware and/or software), especially if you have a broadband Internet connection such as DSL or cable modem. • Keep your computer’s operating system and browser fully patched for critical security issues. We recommend use of the most current, fully patched, versions of Internet browsers for accessing the Service.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes Login Names, Passwords, Images & Passphrases - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) Login Name, Password and PasscodePersonal Image and Passphrase. During the enrollment process, you will be asked to select a unique Access IDLogin Name, Password, Image and then choose a Passcode Passphrase that will be used to gain access to the Service. You determine your own PasscodePassword, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistanceto reset your password. Because your Passcode Password is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode Password that is hard to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode Password safe. • Memorize your Passcode Password and do NOT write it down. • You should also change your Passcode Password occasionally, such as every 90 days. • Passwords should not be shared among authorized users. • A Passcode Password should be changed immediately if you suspect that your Passcode Password has been compromised. This can Call the bank to request your password be done at any time from the “User Services” menu after you log on to the Servicechanged. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL E-MAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS IDLOGIN NAME, OR YOUR PASSCODEPASSWORD. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution Kearny Bank nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution us for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode that is hard to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode safe. •  Memorize your Passcode and do NOT write it down. •  You should also change your Passcode occasionally, such as every 90 days. •  A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User ServicesOptions” menu after you log on to the Service. NEITHER THIS INSTITUTION KEARNY BANK NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode that is hard to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode safe. •  Memorize your Passcode and do NOT write it down. •  You should also change your Passcode occasionally, such as every 90 days. •  A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONNeither this Institution nor its Service Providers will contact you via telephone or email requesting personal information, YOUR ACCESS your Access ID, OR YOUR PASSCODEor your Passcode. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATIONIf you are contacted by anyone requesting this information, PLEASE CONTACT US IMMEDIATELYplease contact us immediately.

Internet Security. The Service utilizes a comprehensive Bank will NEVER contact you to ask for your Access ID or Password. If you are approached by anyone to provide your Access ID and Password, DO NOT PROVIDE THIS INFORMATION. Contact your local branch of Shelby State Bank immediately, as you could be the victim of attempted fraud or identity theft. At Shelby State Bank, we understand the importance of the responsibility that our customers have entrusted to us. Shelby State Bank is proud of the sophisticated level of data security strategy and privacy supplied to its Internet Banking clients and their accountholders. Data security is provided on multiple levels: by firewall, network monitoring, application-level security and company policy. LAYERED AUTHENTICATION This security feature is designed to protect the privacy and security of your accounts personal information. The display of the authentication image and transactions conducted over the Internetpass phrase verifies you are at our Web Site, not a fraudulent look-alike site. Prior The challenge questions/answers are used to activating your identify you and prevent unauthorized access to your information. Registering the Service, our Internet Banking Department will computer(s) you normally use to access your information provides additional security to verify your identity identity. The image or picture is defaulted and authorization against information associated with cannot be changed during the Eligible Account (s) that establishment of Layered Authentication. Once you request to be linked to have completed the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment authentication process, you will may select another image from the Change Security Data on the Internet Banking Options button. • The email address appears as stored in Internet Banking. If this area is blank, enter your valid contact email address and confirm it. If the email address displayed is invalid, it can be asked to select a unique Access ID, corrected after completing the Layered enrollment and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers you have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Because your Passcode is used to access your accounts. To correct your email address, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use words based on your name, address or other personal “Change E-mail Address” from the Options button and complete the required information. • Special characters Enter an Authentication Pass Phrase you will recognize during future logins, up to 100 characters. • Select each Challenge Question and provide your answer, up to 83 characters. The Challenge Questions may be used to increase securityauthenticate the user when accessing Internet Banking from a non-registered computer. • Do NOT use dictionary wordsSelect an option to register the computer you are currently using. The “Help” link within first option, "This is a Personal Computer, Register it.", is selected for the Service will offer tips on choosing computer used most often to access your accounts via Internet Banking. You may register more than one computer. The second option, "This is a secure Passcode that Public Computer. Do Not Register it.", is selected when you can remember. • Keep are accessing your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionallyaccounts from a computer used for a one-time access, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELYan Internet café or library.

Internet Security. The Online Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Online Banking Service, our Internet Banking Operations Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Online Banking Service. Access IDs Usernames and Passcodes passwords - One of the main security features protecting the Online Banking Service is the unique combination of your Access Identification Code (Access ID) username and Passcodepassword. During the enrollment process, you will be asked to select a unique Access IDusername and password. For security purposes, do not use your account number or social security number as your username. Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in password within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode password, you may use our online automated password reset feature or you may contact this Institution for assistance. Because your Passcode password is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode password that is hard difficult to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode password safe. •  Memorize your Passcode password and do NOT write it down. •  You should also change your Passcode password occasionally, such as every 90 days. • A Passcode  Passwords should not be changed shared with anyone, even Authorized Users. When you enroll for the Online Banking Service you agree to change your password immediately if you suspect that your Passcode password has been compromised. This can be done at any time from the “User ServicesSettings | Security | Password” menu after you log on to the Online Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGE REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS IDUSERNAME, PASSWORD, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US IMMEDIATELYOUR OPERATIONS DEPARTMENT IMMEDIATELY AT 000-000-0000 or 000-000-0000.

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted con- ducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department we will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Internet Banking Service. Access IDs and Passcodes - One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) ID and Passcode. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Pass- code, you may use our online automated Passcode reset feature or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard difficult to guess. • You should not NOT use words based on your name, address or other personal information. • Special characters may Passcodes should not be used to increase securityshared with anyone, even Authorized Users. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also will be prompted to change your password every six (6) months When you enroll for the Internet Banking Service you agree to change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” Services menu after you log on to the In- xxxxxx Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MES- SAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR CUSTOMER SERVICE DEPARTMENT IMMEDIATELY. Encryption - The Internet Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Internet Banking Service. The Internet Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session with the appearance of a small icon of a locked padlock. What this means to you is that your communications are scrambled from your browser to our servers at all times to minimize the risk of any unau- thorized party reading the information as it is carried over the Internet. Certificate Authority - The servers hosting the Internet Banking Service have been certified by a certificate authority to help assure you that you are actually talking to the Internet Banking Service instead of someone pretending to be us. By clicking on the lock within the Internet Banking Service, you can view the certificate to ensure it's valid. Cookies - During your use of the Internet Banking Service, our Internet banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide an Access ID and Passcode for each individual transaction. You must accept this cookie to use the Internet Bank- ing Service. The session cookie is stored on your computer's hard drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or permanent cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer's hard drive until you clear cookies with your browser. If you do not accept these cookies, you may not be able to use all the features of the Internet Banking Service. Multi-Level Authentication - We use multi-level authentication (or enhanced security) to help prevent unauthorized ac- cess to your accounts. As part of our enhanced security solution, we may ask you to select challenge questions which may be used to help verify your identity in the event unusual login or transaction activity is detected. We may also send you a One Time PIN (OTP) which can be used to help authenticate your login or transaction requests.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONNeither this Institution nor its Service Providers will contact you via telephone or email requesting personal information, YOUR ACCESS your Access ID, OR YOUR PASSCODEor your Passcode. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATIONIf you are contacted by anyone requesting this information, PLEASE CONTACT US IMMEDIATELYplease contact us immediately.

Internet Security. The Online Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Online Banking Service, our Internet Online Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Online Banking Service. Access IDs and Passcodes - One of the main security features protecting the Online Banking Service is the unique combination of your Access Identification Code (Access ID) ID and Passcode. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frameattempts. You may If you need to reset your passcode Passcode, you may use our online automated Passcode reset feature or you may contact this Financial Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • - You should carefully select a Passcode that is hard difficult to guess. • - You should not use words based on your name, address or other personal information. • x Special characters may be used to increase security. • - Do NOT use dictionary words. - Keep your Passcode safe. - Memorize your Passcode and do NOT write it down. - You will be required to change your password at least every 12 months. However, you should change your Passcode occasionally, such as every 90 days. - Passcodes should not be shared with anyone, even Authorized users. - The “"Help” " link within the Online Banking Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also When you enroll for the Online Banking Service you agree to change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Online Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR ONLINE BANKING DEPARTMENT IMMEDIATELY. Encryption – The Online Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Online Banking. Your browser automatically activates this technology when it attempts to connect to our Online Banking Service. The Online Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from “open” to “locked”. What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Online Banking Service have been certified by a certificate authority to assure you that you are actually talking to the Online Banking Service instead of someone pretending to be us. By clicking on the lock within the Online Banking Service, you can view the certificate to ensure it’s valid. Cookies - During your use of the Online Banking Service, our Online Banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide an Access ID and Passcode for each individual transaction. You must accept this cookie to use the Online Banking Service. The session cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or “permanent” cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer’s hard drive until you clear cookies with your browser. If you do not accept these cookies, you may not be able to use all the features of the Online Banking Service. Multi-Level Authentication - We use multi-level authentication (or enhanced security) to help prevent unauthorized access to your accounts. As part of our enhanced security solution we may ask you to select challenge questions which may be used to help verify your identity in the event unusual login or transaction activity is detected. We may also send you a One Time PIN (OTP) which can be used to help authenticate your login or transaction requests.

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (seligible account(s) that you request to be linked to the Internet Banking Service. Access IDs ID’s and Passcodes - Passcodes: One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) access ID and Passcodepasscode. During the enrollment process, you will be asked to select a unique Access access ID and passcode. For security purposes, do not use your account number or social security number as your access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode, you may use our online automated passcode online reset feature or you may contact this Institution us at (000) 000-0000 for assistance. Because Since your Passcode passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode passcode that is hard difficult to guess. • You should not NOT use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode passcode safe. • Memorize your Passcode passcode and do NOT write it down. • You should also change your Passcode passcode occasionally, such as every 90 days. • A Passcode Passcodes should not be changed shared with anyone, even Authorized Users. • The “Help” link within the Internet Banking Service will offer tips on choosing a secure passcode that you can remember. When you enroll for the Internet Banking Service, you agree to change your passcode immediately if you suspect that your Passcode passcode has been compromised. This can be done at any time from within the “User Services” menu after you log on to the Internet Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGE REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US BRIGHTON BANK IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access Login IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Login Identification Code (Access Login ID) and Passcode. During the enrollment process, you will be asked to select a unique Access Login ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Multifactor Authentication- For the enhanced security of our users and to comply with Federal Regulation, we use Multifactor Authentication. Multifactor Authentication (MFA) is the process of requiring additional user input in the form of a security challenge code or a one time access code which is delivered to the user through email or by an automated phone call. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it It down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User ServicesSecurity ” menu link after you log on to the Service. For additional security, you may also change your login ID and create a special challenge code. Both of these functions can be performed under the “Security” link after you log into the service NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY. Encryption — The Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Service. The Service requires a browser that supports 128-bit encryption. The Service will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from “open” to “locked”. What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Service have been certified by a Certificate Authority to assure you that you are actually talking to the Service instead of someone pretending to be us. If you are using an older browser, such as anything prior to versions 4.0 on Netscape Navigator or Internet Explorer, you will see that the Certificate Authorities key may have expired; you will need to update your browser. Instructions for upgrading your browser are located on the Browser SSL Update link, which is located on the Service login page. By clicking on the lock within the Service, you can view the certificate to ensure it’s valid. Cookies - During your use of the Service, our Internet banking Service Provider will pass an encrypted cookie to your computer in order to identify your computer during the session. This cookie enables us to process multiple transactions during the session without having to provide an Login ID and Passcode for each individual transaction. Users must accept this cookie to use the Service. This cookie does not contain any personal information; it simply provides another level of security for our Internet banking product. The cookie is stored on your computer’s hard- drive, identifying your computer while you are logged on. When you log off, close your browser, or turn off your machine, the cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Additional Security Guidelines: • All Authorized Users should sign-off after every Service session; however, online sessions will automatically end after ten (10) minutes of inactivity. This to protect you in case you accidentally leave your computer unattended after you log-in. • The security of public computers (e.g. in a library, or Internet café) cannot be assured; therefore we recommend that you refrain from accessing the Service on a public computer. • Routinely scan your computer, servers, and electronic media using a reliable virus detection product. Undetected or un-repaired viruses may corrupt and destroy your programs, files, and even your hardware. Additionally, you may unintentionally transmit a virus to other computers. • Use a firewall product (hardware and/or software), especially if you have a broadband Internet connection such as DSL or cable modem. • Periodically update your computer operating system and browser for critical security related patches. We recommend use of the most current, fully patched, versions of Internet browsers for accessing the Service.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Electronic Services Department will verify your identity and authorization against information associated with the Eligible Account (sAccount(s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Passcode online or you may contact this Institution for assistanceassistance at 787-815-2667 ext. 2300. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • · You should carefully select a Passcode that is hard to guess. • · You should not use words based on your name, address address, or other personal information. • · Special characters may be used to increase security. • · Do NOT use dictionary words. The “"Help” " link within the Service will offer tips on choosing a secure Passcode that you can remember. • · Keep your Passcode safe. • · Memorize your Passcode and do NOT write it down. • · You should also change your Passcode occasionally, such as every 90 days90days. • · A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “"User Services” " menu after you log on to onto the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATIONNeither this Institution nor its Service Providers will contact you by telephone or email requesting personal information, YOUR ACCESS your Access ID, OR YOUR PASSCODEor your Passcode. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATIONIf you are contacted by anyone requesting this information, PLEASE CONTACT US IMMEDIATELYplease contact us immediately. Encryption - The Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Service. The Service requires a browser that supports 128-bitencryption. The Service will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from "open" to "locked". What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Service have been certified by a Certificate Authority to assure you that you are talking to the Service instead of someone pretending to be us. If you are using an older browser, such as anything prior to versions 4.0 on Netscape Navigator or Internet Explorer, you will see that the Certificate Authorities key may have expired; you will need to update your browser. Instructions for upgrading your browser are located on the Browser SSL Update link, which is located on the Service login page. By clicking on the lock within the Service, you can view the certificate to ensure it’s valid. Cookies - During your use of the Service, our Internet banking Service Provider will pass an encrypted cookie to your computer in order to identify your computer during the session. This cookie enables us to process multiple transactions during the session without having to provide an Access ID and Password for each individual transaction. Users must accept this cookie to use the Service. This cookie does not contain any personal information; it simply provides another level of security for our Internet banking product. The cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. When you log off, close your browser, or turn off your machine, the cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. An encrypted non-expiring Cookie is also used within our Internet banking product for the identification of this Institution. Multi-Level Authentication - We use multi-level authentication and behavior analysis to help prevent unauthorized access to your accounts. Multi-level authentication can help prevent access by someone who may have stolen your login credentials. Additional Security Guidelines: · All Authorized Users should sign-off after every Service session; however, online sessions will automatically end after ten (10) minutes of inactivity. This to protect you in case you accidentally leave your computer unattended after you log-in. · The security of public computers (e.g. in a library, or Internet cafe) cannot be assured; therefore, we recommend that you refrain from accessing the Service on a public computer. · Routinely scan your computer, servers, and electronic media using reliable virus detection and anti- spyware products. Undetected or un-repaired viruses or spyware may affect the performance of your computer, corrupt and destroy your programs, files, and even your hardware. Additionally, you may unintentionally transmit sensitive data to another third party or transmit a virus to other computers. · Use a firewall product (hardware and/or software), especially if you have a broadband Internet connection such as DSL or cable modem. · Keep your computer’s operating system and browser fully patched for critical security issues. We recommend use of the most current, fully patched, versions of Internet browsers for accessing the Service.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access User IDs and Passcodes Passwords - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access User ID) and PasscodePassword. During the enrollment process, you will be asked to select a unique Access User ID, and then choose a Passcode Password that will be used to gain access to the Service. You determine your own PasscodePassword, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate lock your account after three five (5) unsuccessful login attempts within a 24-hour time frameattempts. You may reset your passcode online or you may contact this Institution password by contacting Bank of Xxxxxxx for assistance. Because your Passcode Password is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode Password that is hard to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode Password safe. •  Memorize your Passcode Password and do NOT write it down. •  You should also change your Passcode Password occasionally, such as every 90 days. •  A Passcode Password should be changed immediately if you suspect that your Passcode Password has been compromised. This can be done at any time from the “User Services” menu "My Profile" tab and choose change password in the in the My Profile box to the left.  Neither this institution nor its service providers will contact you via telephone or email requesting personal information, your access ID, or your password. If you are contacted by anyone requesting this information, please contact us immediately. Additional Security Guidelines:  All Authorized Users should sign-off after every Service session; however, online sessions will automatically end after a period of inactivity. This to protect you in case you accidentally leave your computer unattended after you log log-in.  The security of public computers (e.g. in a library, or Internet café) cannot be assured; therefore we recommend that you refrain from accessing the Service on a public computer.  Routinely scan your computer, servers, and electronic media using a reliable virus detection product. Undetected or un-repaired viruses may corrupt and destroy your programs, files, and even your hardware. Additionally, you may unintentionally transmit a virus to other computers.  Use a firewall product (hardware and/or software), especially if you have a broadband Internet connection such as DSL or cable modem.  Periodically update your computer operating system and browser for critical security related patches. We recommend use of the most current, fully patched, versions of Internet browsers for accessing the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes - One of the main security features protecting the Service is the unique combination of your Access Identification Code (Access ID) and Passcode. During the enrollment process, you will be asked to select a unique Access ID, and then choose a Passcode that will be used to gain access to the Service. You determine your own Passcode, which is encrypted in our database. Neither this Institution nor its Service Providers have access to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode online or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode that is hard to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode safe. •  Memorize your Passcode and do NOT write it down. •  You should also change your Passcode occasionally, such as every 90 days. •  A Passcode should be changed immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User ServicesOptions” menu after you log on to the Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE OR EMAIL REQUESTING PERSONAL INFORMATION, YOUR ACCESS ID, OR YOUR PASSCODE. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS INFORMATION, PLEASE CONTACT US IMMEDIATELY.

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Internet Banking Service. Access IDs and Passcodes - One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) ID and Passcode. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Passcode, you may use our online automated Passcode reset feature or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard difficult to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcodes should not be shared with anyone, even Authorized Users. • The “Help” link within the Internet Banking Service will offer tips on choosing a secure Passcode should be changed that you can remember. When you enroll for the Internet Banking Service you agree to change your Passcode immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” menu after you log on to the Internet Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR INTERNET BANKING DEPARTMENT IMMEDIATELY.

Internet Security. The Service utilizes Services utilize a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Service, our Internet Banking Department will verify your identity Login ID and authorization against information associated with the Eligible Account (s) that you request to be linked to the Service. Access IDs and Passcodes Passwords - One of the main security features protecting the Service Services is the unique combination of your Access Identification Code (Access ID) Login ID and PasscodePassword. During the enrollment process, you will be asked to select a unique Access Login ID and Password. For security purposes, do not use your account number or social security number as your Login ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Password within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Password, you may use our online automated Password reset feature or you may contact this Institution for assistancethe Bank during regular business hours. Because your Passcode Password is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode Password that is hard difficult to guess. •  You should not use words based on your name, address or other personal information. •  Special characters may be used to increase security. •  Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. •  Keep your Passcode Password safe. •  Memorize your Passcode Password and do NOT write it down. •  You should also change your Passcode Password occasionally, such as every 90 days. • A Passcode  Passwords should not be changed shared with anyone, even Authorized Users. You agree to change your Password immediately if you suspect that your Passcode Password has been compromised. This can be done at any time from the “User Services” menu after you log on to the Service. NEITHER THIS INSTITUTION THE BANK NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS LOGIN ID, PASSWORD, CREDIT CARD NUMBER, DEBIT CARD NUMBER OR YOUR PASSCODEPIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR CUSTOMER SERVICE DEPARTMENT IMMEDIATELY.

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department will verify your identity will be verified and authorization against information associated with the Eligible Account (sAccount(s) that you request to be linked to the ServiceInternet Banking Service will be verified. Access IDs Usernames and Passcodes - One passwords – one of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) username and Passcodepassword. During the self-enrollment process, you will be asked to select a unique Access IDusername and password. For security purposes, do not use your account number or social security number as your username. Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in password within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode password, you may use our online automated password reset feature or you may contact this Institution for assistance. Because your Passcode password is used to access your accounts, you should treat it as you would any other sensitive personal data. •  You should carefully select a Passcode password that is hard difficult to guess. • guess  You should not use words based on your name, address or other personal information. • information  Special characters may be used to increase security. • security  Do NOT use dictionary words. words  Keep your password safe  Memorize your password and do NOT write it down  You should also change your password occasionally, such as every 90 days  Passwords should not be shared with anyone, even Authorized Users  The “Help” link within the Internet Banking Service will offer tips on choosing a secure Passcode password that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also remember When you enroll for the Internet Banking Service you agree to change your Passcode occasionally, such as every 90 days. • A Passcode should be changed password immediately if you suspect that your Passcode password has been compromised. This can be done at any time from the “User Services” menu after you log on to the Internet Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS IDUSERNAME, PASSWORD, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR BOOKKEEPING DEPARTMENT IMMEDIATELY. Encryption – The Internet Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet Banking. Your browser automatically activates this technology when it attempts to connect to our Internet Banking Service. The Internet Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from “open” to “locked”. What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority – The servers hosting the Internet Banking Service have been certified by a certificate authority to assure you that you are actually talking to the Internet Banking Service instead of someone pretending to be us. By clicking on the lock within the Internet Banking Service, you can view the certificate to ensure it’s valid. Cookies – During your use of the Internet Banking Service, our Internet Banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide a username and password for each individual transaction. You must accept this cookie to use the Internet Banking Service. The session cookie is stored on your computer’s hard-drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or “permanent” cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer’s hard drive until you clear cookies with your browser. If you do not accept these cookies, you may not be able to use all the features of the Internet Banking Service. Multi-Level Authentication – We use multi-level authentication (or enhanced security) to help prevent unauthorized access to your accounts. As part of our enhanced security solution we may ask you to select challenge questions which may be used to help verify your identity in the even unusual login or transaction activity is detected. We may also send you a One-Time PIN (OTP) which can be used to help authenticate your login or transaction requests.

Internet Security. The Internet Banking Service utilizes a comprehensive security strategy to protect your accounts and transactions conducted over the Internet. Prior to activating your access to the Internet Banking Service, our Internet Banking Department will verify your identity and authorization against information associated with the Eligible Account (s) that you request to be linked to the Internet Banking Service. Access IDs and Passcodes - One of the main security features protecting the Internet Banking Service is the unique combination of your Access Identification Code (Access ID) ID and Passcode. During the enrollment process, you will be asked to select a unique Access ID and Passcode. For security purposes, do not use your account number or social security number as your Access ID, . Encryption and then choose a Passcode that will be access controls are used to gain access to the Service. You determine protect your own Passcode, which is encrypted in Passcode within our database. Neither this Institution nor its Service Providers have access If you need to this information. The Service will automatically deactivate your account after three unsuccessful login attempts within a 24-hour time frame. You may reset your passcode Passcode, you may use our online automated Passcode reset feature or you may contact this Institution for assistance. Because your Passcode is used to access your accounts, you should treat it as you would any other sensitive personal data. • You should carefully select a Passcode that is hard difficult to guess. • You should not use words based on your name, address or other personal information. • Special characters may be used to increase security. • Do NOT use dictionary words. The “Help” link within the Service will offer tips on choosing a secure Passcode that you can remember. • Keep your Passcode safe. • Memorize your Passcode and do NOT write it down. • You should also change your Passcode occasionally, such as every 90 days. • A Passcodes should not be shared with anyone, even Authorized Users. • The 'Help' link within the Internet Banking Service will offer tips on choosing a secure Passcode should be changed that you can remember. When you enroll for the Internet Banking Service you agree to change your Passcode immediately if you suspect that your Passcode has been compromised. This can be done at any time from the “User Services” Services menu after you log on to the Internet Banking Service. NEITHER THIS INSTITUTION NOR ITS SERVICE PROVIDERS WILL CONTACT YOU VIA TELEPHONE BY TELEPHONE, EMAIL OR EMAIL TEXT MESSAGING REQUESTING PERSONAL INFORMATION, SUCH AS YOUR ACCESS ID, PASSCODE, CREDIT CARD NUMBER, ATM CARD NUMBER OR YOUR PASSCODEATM PIN. IF YOU ARE CONTACTED BY ANYONE REQUESTING THIS TYPE OF INFORMATION, PLEASE DO NOT PROVIDE ANY INFORMATION AND CONTACT US OUR INTERNET BANKING DEPARTMENT IMMEDIATELY. Encryption - The Internet Banking Service uses the Secure Socket Layer (SSL) encryption technology for everything you do while using Internet banking. Your browser automatically activates this technology when it attempts to connect to our Internet Banking Service. The Internet Banking Service requires a browser that supports 128-bit encryption and we will warn you if your browser does not meet this requirement. Whenever SSL is securing your communications, the browser will typically indicate this secure session by changing the appearance of a small icon of a padlock at the bottom of the screen from 'open' to 'locked'. What this means to you is that your communications are scrambled from your browser to our servers at all times so no unauthorized party can read the information as it is carried over the Internet. Certificate Authority - The servers hosting the Internet Banking Service have been certified by a Certificate Authority to assure you that you are actually talking to the Internet Banking Service instead of someone pretending to be us. By clicking on the lock within the Internet Banking Service, you can view the certificate to ensure it's valid. Cookies - During your use of the Internet Banking Service, our Internet banking Service Provider will pass an encrypted session cookie to your computer that enables us to process multiple transactions during the session without having to provide an Access ID and Passcode for each individual transaction. You must accept this cookie to use the Internet Banking Service. The session cookie is stored on your computer's hard-drive, identifying your computer while you are logged on. The session cookie does not contain any personal information. When you log off, close your browser, or turn off your machine, the session cookie will be destroyed. A new cookie is used for each session; thus, no one can use the prior cookie to access your account. Our Service Provider also uses persistent or permanent cookies to identify this Institution and your computer as part of our enhanced security. The permanent cookies will remain on your computer's hard drive until you clear cookies with your browser. If you do not accept these cookies, you may not be able to use all the features of the Internet Banking Service. Multi-Level Authentication - We use multi-level authentication (or enhanced security) to help prevent unauthorized access to your accounts. As part of our enhanced security solution we may ask you to select challenge questions which may be used to help verify your identity in the event unusual login or transaction activity is detected. We may also send you a One Time PIN (OTP) which can be used to help authenticate your login or transaction requests.