Account Security

Your trading data is valuable. Here's how to keep your TradeLogist account secure.

Password Security

Strong Password Guidelines

Create a strong password:

• Minimum 12 characters
• Mix of uppercase and lowercase
• Include numbers
• Include special characters (!@#$%^&*)
• Avoid dictionary words
• Don't reuse passwords

Password Examples

Changing Your Password

1. Go to Settings > Security
2. Click Change Password
3. Enter current password
4. Enter new password (twice)
5. Click Update Password

Password Recovery

If you forget your password:

1. Click Forgot Password on login
2. Enter your email
3. Check for reset link
4. Create new password
5. Log in with new password

Two-Factor Authentication

What is 2FA?

Two-factor authentication adds a second verification step:

1. Enter password (something you know)
2. Enter code from phone (something you have)

Even if password is stolen, account stays secure.

Enable 2FA

See Two-Factor Authentication for setup guide.

Login Security

Login Notifications

Get notified of new logins:

• Email alert for new device
• Email alert for new location
• In-app notification

Enable in Settings > Security > Login Alerts.

Session Management

View active sessions:

1. Go to Settings > Security
2. Click Active Sessions
3. See all logged-in devices
4. End suspicious sessions

Ending Sessions

To log out other devices:

1. Find the session
2. Click End Session
3. Device is logged out immediately

To log out all devices:

1. Click End All Sessions
2. Confirm action
3. All devices logged out (except current)

Security Monitoring

Login History

Review your login history:

Suspicious Activity

Signs of potential compromise:

• Logins from unfamiliar locations
• Failed login attempts
• Settings changes you didn't make
• Trades you didn't enter

What to Do If Compromised

1. Change password immediately
2. Enable 2FA if not already
3. End all active sessions
4. Review recent activity
5. Contact support

Security Best Practices

Do

• Use unique password for TradeLogist
• Enable two-factor authentication
• Log out on shared devices
• Keep email account secure
• Update browser regularly

Don't

• Share your password
• Use public WiFi without VPN
• Click suspicious email links
• Save password in plain text
• Use same password elsewhere

Email Security

Why Email Matters

Your email is the recovery key. Keep it secure:

• Strong email password
• 2FA on email account
• Monitor for suspicious activity

Email Verification

Keep your email verified:

1. Verify email after registration
2. Re-verify after email change
3. Check for verification alerts

Device Security

Trusted Devices

Manage trusted devices:

• Mark personal devices as trusted
• Remove old devices
• Regular cleanup

Shared Computers

On shared or public computers:

1. Use incognito/private mode
2. Never save password
3. Always log out
4. Clear browser data

Third-Party Access

Connected Apps

Review apps with access:

1. Go to Settings > Security
2. Click Connected Apps
3. Review permissions
4. Revoke unnecessary access

API Keys (Coming Soon)

When available:

• Create separate keys per app
• Set permission limits
• Rotate keys regularly
• Revoke unused keys

Security Updates

Stay Informed

We notify you about:

• Security improvements
• Required password changes
• Potential vulnerabilities
• Important updates

Keeping Updated

• Keep browser updated
• Update operating system
• Use latest app version

Contacting Support

Security Issues

For security concerns:

• Email: [email protected]
• Response within 24 hours
• Include account email
• Describe the issue

Report Vulnerabilities

Responsible disclosure:

• Email [email protected]
• Describe vulnerability
• Do not exploit
• We acknowledge contributors

Next Steps

• Two-Factor Authentication - Enable 2FA
• Data Privacy - Privacy settings
• Profile Settings - Account settings