General Personal Security Image & Phrase questions What is the Personal Security Image & Phrase? You selected your Personal Security Image & Phrase when you enrolled your account on merrilledge.com. It is used as part of your login experience. After you enter your User ID, you are presented with a screen that displays your Personal Security Image & Phrase and asks for your Password. In the coming weeks, you’ll have a new, simplified login from your desktop and mobile devices in which you will only need to enter your User ID and Password. Your Personal Security Image & Phrase will no longer be part of your login experience. Why are we making changes to login? We know how important security and convenience are to you, so we’re giving you more tools to manage your security and simplifying the way you log in to your Merrill Edge accounts. You’ll soon be able to log in with only your User ID and Password, and the Personal Security Image & Phrase will no longer be part of the way you log in. Simplified login experience Why don't I see my Personal Security Image & Phrase on the screen where I enter my Password? The Personal Image & Phrase will no longer be part of the way you log in. Soon, you will be able to enter just your User ID and Password. Is there an option to keep using my Personal Security Image & Phrase after the simplified login is introduced? No, there isn't an option to continue using your Personal Security Image & Phrase. We are simplifying the way you log in so your Personal Security Image & Phrase — the image and phrase you used to see before entering your Password — will no longer be part of the way you log in. Soon, you'll be able to log in with just your User ID and Password. When will the login changes occur on merrilledge.com? These changes will take place over the next few weeks. How will login changes impact Merrill Lynch Wealth Management® and/or U.S. Trust® clients? Clients who also use mymerrill.com or ustrust.com will experience these same changes. Online and Mobile Banking Security Tools With the login changes, is merrilledge.com still secure? Yes, and we’re giving you tools, located conveniently in your new Security Center, to help you manage your account security. You’ll have the option to add extra security to help verify your identity with a one-time authorization code, which is sent by text,1 call or email each time you log in.2 In addition, you can update security settings, including changing your User ID, Password, and personal challenge questions. You’ll be able to access your new Security Center in the next few weeks in the Help & Support menu. How do I know I’m on the real Merrill Edge® site? Before you log in, check your browser address bar for: • • • www.merrilledge.com Green text/shading Lock icon Examples (you may see slight variations depending on your browser type): What security tools are available to me? You'll have the option to add extra security to help verify your identity with a one-time authorization code, which is sent by text1, call or email each time you log in.2 You can also regularly update your security settings. These features will be conveniently located in one place in your new Security Center, which can be found in the next few weeks in the Help & Support menu on merrilledge.com. What are challenge questions and how are they used? They are used to help verify your identity when you log in from an unrecognized computer or mobile device. You selected challenge questions and answers when you enrolled your account on merrilledge.com. You can change them at any time by going to your new Security Center in the Help & Support menu on merrilledge.com. How does the one-time authorization code option work? With the launch of your new Security Center in the next few weeks on merrilledge.com, you may opt for extra security at login. You'll receive a one-time authorization code through a text1, call or email each time you log in to your Merrill Edge accounts.2 The code can only be used once and will expire within 10 minutes after it is sent. Your ability to receive and enter the code helps verify your identity. How do I know I'm using the real Merrill Edge® app? If an app is available for your mobile device, make sure you download the official Merrill Edge app3 from a reputable app store such as Google Play or the Apple App Store. 1. Your mobile service provider may charge for sending and receiving text messages on your mobile phone. Check with your service provider for details on specific fees and charges that may apply. 2. Initially, you’ll only be able to select this option within your Security Center on merrilledge.com; however, the selection will apply to login for both online investing and mobile investing through the Merrill Edge app. 3. The Merrill Edge app is available on iPad®, iPhone® and Android™ devices. iPhone and iPad are trademarks of Apple Inc., registered in the U.S. and other countries. Android is a trademark of Google Inc. SiteKey, Bank of America and the Bank of America logo are registered trademarks of the Bank of America Corporation. Merrill Edge is available through Merrill Lynch, Pierce, Fenner & Smith Incorporated (MLPF&S), and consists of the Merrill Edge Advisory Center™ (investment guidance) and self-directed online investing. Banking products are provided by Bank of America, N.A., and affiliated banks, Members FDIC and wholly owned subsidiaries of Bank of America Corporation. MLPF&S is a registered broker-dealer, Member SIPC and a wholly owned subsidiary of Bank of America Corporation. Investment products: Are Not FDIC Insured Are Not Bank Guaranteed May Lose Value © 2015 Bank of America Corporation. All rights reserved. | AR9D6TCN | LP-06-15-0049 | 06/2015