Account Security Policy

1. Keep your sensitive, personal information safe offline.
2. • File account statements or any documents with personal information in a safe place.
   • Keep passwords, PINs, and account numbers confidential.
   • Using a cross-cut shredder, shred any papers that might contain personal information before disposing of them.

• • Keep your computer's antivirus, firewall and spyware protection up to date.
  • Do not use unsecured, public networks to log in to accounts with sensitive information.
  • Always log out before closing your browser window.
  • Do not email sensitive, personal information (unless it is encrypted).
  • Use strong passwords (for example, a "passphrase" that uses the first letter of each word of a sentence you create, plus a number and/or special character).
  • Use different passwords for different accounts.
  • Consider what information you post to social media carefully - do not share details about your background that could be used in a challenge question.
  • Some systems will ask if you want to register your device. This is a matter of personal preference and convenience. Not registering your device usually means that you will be asked additional authentication questions, which could be a more secure option.

• • Never provide personal, sensitive information to someone who phones you. You cannot verify their identity, and financial institutions will not ask for this information by phone.
  • If you receive a call from us regarding your account and have any concerns about the validity of the call, hang up, contact us based on the contact information stated on our website and ask to speak to a supervisor.
  • Do not open attachments or click on links in suspicious emails. These are often openings to install malware on your computer or to re-direct your browser to spoof sites designed to capture personal information.
  • Always use a search engine to get to a service provider's account log-in page or cut and paste the address into your browser yourself.

• • Use a lock screen with a PIN, password, or swipe pattern that only you know.
  • Download apps from reputable sources only.
  • Install malware protection and keep your operating system and apps updated.
  • Back up your phone's data and set up a "remote wipe" app that allows you to remove data from your phone in the event it is lost or stolen.

• • Once you register your information, make it a habit to review your account regularly for suspicious activity.
  • Check profile information and transactional activity frequently.

• • Make your user ID and password as unique as possible (see below for more tips).
  • Choose challenge questions based on answers only you would know. Or makeup answers to the challenge questions—as long as you can remember what answer you provided.
  • Review statements and confirmations promptly. These notices are our way of letting you know that what actions have been taken on your behalf.
  • If you hear from any service provider that your personal information has been compromised, immediately update your Prudential Retirement security settings and passwords.

• • Must contain both letters and numbers
  • Should not contain your Social Security number
  • Cannot contain spaces

• • Must contain both letters and numbers
  • Must be between six and 20 characters
  • Are case sensitive
  • Should not contain your Social Security number
  • Cannot contain spaces

• • If you receive a communication that looks suspicious or feel you may have been a victim of a fraud involving our name or logo, forward the information to us at support@usemanifest.com.
  • In addition, if you have been a victim of a fraud, call your local police department and/or the U.S. Federal Trade Commission's Consumer Help Line at 877-FTC-HELP (877-382-4357).