Community First Bank understands that the security of your personal and account information is important to you. We also understand that our continued success as a financial institution relies on both our ability to offer banking services to you in a secure manner as well as your responsibility in keeping any access codes, passwords or PINs secure. To assist us in offering these Web-based banking services in a secure manner, we employ a number of measures, which are described below. These measures allow us, among other benefits, to properly authenticate your identity when you access these services and protect your information as it traverses the Internet between your PC and Community First Bank.

Log-In ID and Password
Every end user must privately maintain a combination of a bank ID and password. Because the end user is assigned the original password by the bank administrator, the Online Banking system forces the end user to change the password once logged onto the system and before any transactions can be requested. This forces the end user to establish an absolutely private password which, the bank will not have access to. In case the password is lost or forgotten we will reset a default password for the end user once the Bank has confirmed your identity.

Password Lock-out
If an unauthorized person attempts entry into an end user's account by trying to guess a log-in ID, the system will disable the password on the third incorrect attempt, thus invalidating the log-in combination. If you accidentally activate this security feature by unintentionally mis-keying a password three times, you would need to call the Bank to reestablish the password for that account. For example, a common mistake made by the end user is having the Caps-Lock on while keying in a password.

Automatic Log-off
To further protect you, a timeout feature is used. This feature will automatically log you out of your current financial service session after a 10-minute period on our site.

Browser Security
The Bank also requires the use of secure browsers to protect you while you access our Online Banking services. More specifically, the personal and account information that flows back and forth between your PC and the Bank must be encrypted while in transit - secure browsers are how we achieve this level of protection. Encryption is the process of scrambling information (typically for data transmission) so that it can only be reassembled in its original clear text format by someone who has the correct encryption key to do so. When used between you and the Bank, this technology encrypts your personal information as you send it to us, which only Community First Bank can decrypt. Likewise, when we send personal or account information to you, this technology encrypts it, which only you can decrypt. This is possible through a certified 128 bit secure server by VeriSign so that no unauthorized individuals can read or decipher the data.

How You Can Protect Your Internet Security
While Community First Bank works to protect your banking privacy, you will also play an important role in protecting your accounts. There are a number of steps you can take to ensure that your Community First Bank account information is protected, including:

• Don't use obvious numbers or easily accessible information for your log-in ID and Password.
• Ensure that no one is watching when entering your log-in ID and Password.
• Don't record your log-in ID and Password on paper. Try to memorize them, if possible.
• If you do record your log-in ID and Password, keep them in a safe, secure location.
• Do not share your log-in ID and Password with anyone.
• Review your account information often. Report any unusual activity immediately.
• If you'll be away from your computer for any length of time, log out of Online Banking.
• Never give account information to anyone over the telephone unless you initiated the call.