Account Security Settings

Protecting your account is essential. We provide several security features to keep your services and data safe.

Accessing Security Settings

1. Navigate to Dashboard → Profile
2. Click the Security tab
3. View and configure your security options

[Screenshot: Security settings page]

Password Management

Changing Your Password

To update your password:

1. Go to the Security tab in your profile
2. Click Change Password
3. Enter your current password
4. Enter and confirm your new password
5. Click Update Password

Password Requirements

Your password must:

• Be at least 8 characters long
• Include a mix of letters, numbers, and special characters (recommended)
• Be unique and not used on other websites

Password Reset

If you've forgotten your password:

1. Click Forgot Password on the login page
2. Enter your email address
3. Check your email for reset instructions
4. Follow the link to create a new password

Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security by requiring a second verification code when you log in.

Setting Up 2FA

1. Navigate to Security settings
2. Click Enable Two-Factor Authentication
3. Scan the QR code with your authenticator app (Google Authenticator, Authy, etc.)
4. Enter the verification code from your app to confirm
5. Save your backup codes in a safe place

[Screenshot: 2FA setup with QR code]

Using 2FA

When 2FA is enabled:

• Log in with your email and password as usual
• Enter the 6-digit code from your authenticator app
• Optionally check "Trust this device" to skip 2FA for 30 days on this device

Backup Codes

Backup codes let you access your account if you lose access to your authenticator app:

• You'll receive backup codes when enabling 2FA
• Store them securely (not on the same device as your authenticator)
• Each code can only be used once
• Generate new codes if you run out

Disabling 2FA

If you need to disable 2FA:

1. Go to Security settings
2. Click Disable Two-Factor Authentication
3. Enter a verification code or backup code
4. Confirm the change

Session Management

View and manage your active login sessions:

• See all devices currently logged into your account
• View login times and locations
• Sign out from specific devices or all devices at once

[Screenshot: Active sessions list]

Login History

Review your account's login activity:

• See recent login attempts and times
• Check IP addresses and locations
• Identify any suspicious activity

Best Practices

• Never share your password with anyone
• Use a unique password not used on other sites
• Enable two-factor authentication for maximum security
• Review login history regularly for suspicious activity
• Keep your email secure as it's used for account recovery
• Update your password periodically (every 3-6 months recommended)
• Sign out when using shared or public computers

If Your Account Is Compromised

If you suspect unauthorized access:

1. Change your password immediately
2. Enable two-factor authentication if not already active
3. Sign out all other sessions in Session Management
4. Review recent account activity for any unauthorized changes
5. Contact support if you notice suspicious orders or changes