Account Security

Securing Your Account

Your ShopKatalog account is the gateway to your business. Strong account security is essential to protect your shop, customer data, and business information. This guide covers the best practices and tools to keep your account safe.

Password Security

Creating a Strong Password

A strong password is your first line of defense:

Password Examples

Using a Password Manager

A password manager securely stores your passwords:

• Generate and store strong, unique passwords
• Auto-fill passwords in your browser and apps
• Secure password sharing with team members (optional)
• Encrypted storage with master password protection

Popular options: 1Password, Bitwarden, LastPass, KeePass

Changing Your Password

1. Go to Account Settings → Security
2. Click "Change Password"
3. Enter your current password
4. Create a new strong password
5. Confirm the new password
6. Click "Update Password"

Two-Factor Authentication (2FA)

Two-factor authentication adds an extra security layer. Even if someone knows your password, they can't access your account without the second factor.

How 2FA Works

Available 2FA Methods (Coming Soon)

Recovery Codes

When you enable 2FA, you'll receive recovery codes. Store them safely:

Login Security Best Practices

Phishing & Scam Protection

Phishing attacks try to trick you into revealing your password. Here's how to stay safe:

Warning Signs of Phishing

What To Do If You Suspect Phishing

1. Don't click any links or download attachments
2. Don't reply to the email
3. Report it by forwarding to security@shopkatalog.com
4. Delete the email
5. Go directly to ShopKatalog by typing the URL yourself
6. Check your account for unauthorized access

Managing Account Access

Active Sessions

Monitor where your account is logged in:

1. Go to Account Settings → Security → Active Sessions
2. See all devices where you're logged in
3. Logout from any unrecognized devices
4. Logout from all other sessions if needed

Login Activity

Review recent login attempts:

• See when your account was accessed
• Know which devices and locations logged in
• Identify suspicious login attempts
• Get alerts for unusual activity

Connected Devices

Manage apps and devices with access:

1. Go to Account Settings → Security → Connected Devices
2. Review all apps with access to your account
3. Revoke access from apps you no longer use
4. Check permissions for each connected app

Account Recovery

What to do if you've lost access to your account:

Forgot Password

1. Go to login page and click "Forgot Password"
2. Enter your registered email address
3. Check your email for reset link
4. Click the link (valid for 1 hour)
5. Create a new strong password
6. Log in with new password

Account Locked

If you enter wrong password too many times:

• Your account is temporarily locked for security
• Wait 30 minutes before trying again, OR
• Use "Forgot Password" to reset immediately
• You'll receive a security notification

Compromised Account

If you think your account has been hacked:

1. Immediately change your password
2. Review Account Settings → Security → Login Activity
3. Logout all other sessions
4. Enable two-factor authentication
5. Contact support if you notice suspicious activity
6. Check customer information for unauthorized changes

Common Questions

Next Steps