Account Security Best Practices

Password Requirements

• Minimum 12 characters: Longer passwords are exponentially harder to crack
• Mix character types: Use uppercase, lowercase, numbers, and special characters
• Avoid common patterns: Don't use dictionary words, names, or sequential numbers
• Unique to Ascentia: Never reuse passwords from other accounts
• No personal information: Avoid birthdays, addresses, or easily guessable data

Password Management Tips

• Use a reputable password manager to generate and store complex passwords
• Change your password every 90 days or immediately if you suspect compromise
• Never share your password with anyone, including support staff
• Don't write passwords down or store them in plain text files
• Use different passwords for different accounts

Two-factor authentication (2FA) requires a second form of verification beyond your password, making it significantly harder for unauthorized users to access your account even if they obtain your password.

Why 2FA is Essential

• Protects against password theft and phishing attacks
• Provides real-time alerts when someone attempts to access your account
• Required for accessing sensitive features and data
• Industry standard for financial and trading platforms

Recommended 2FA Methods

1. Authenticator Apps: Google Authenticator, Authy, or Microsoft Authenticator (most secure)
2. Hardware Keys: YubiKey or similar physical security keys (highest security)
3. SMS Codes: Text message verification (least secure, but better than nothing)

Device Security Checklist

• Keep software updated: Install operating system and browser updates promptly
• Use antivirus software: Install and maintain reputable security software
• Enable device encryption: Encrypt your hard drive or device storage
• Lock your devices: Use PIN, password, or biometric locks
• Enable auto-lock: Set devices to lock after a few minutes of inactivity
• Secure your network: Use WPA3 encryption on your Wi-Fi router

Public Device Safety

• Avoid accessing Ascentia on public or shared computers
• Never save passwords on devices you don't own
• Always log out completely when finished
• Clear browser history and cache after use
• Use private/incognito browsing mode if necessary

Phishing is a common attack method where criminals impersonate legitimate services to steal your credentials. Learn to recognize and avoid these threats.

Red Flags to Watch For

• Urgent requests for password or account information
• Emails from suspicious or misspelled domain names
• Generic greetings like "Dear User" instead of your name
• Poor grammar, spelling errors, or awkward phrasing
• Unexpected attachments or download links
• Requests to verify account information via email
• Threats of account suspension or closure

What Ascentia Will Never Do

• Ask for your password via email, phone, or chat
• Request sensitive information through unsecured channels
• Send unsolicited attachments or software downloads
• Threaten immediate account closure without prior notice
• Ask you to disable security features

If You Suspect Phishing

1. Don't click any links or download attachments
2. Don't reply to the message
3. Forward the suspicious email to security@ascentia.app
4. Delete the message from your inbox
5. Change your password if you've already clicked a link

Regular Security Checks

• Review your login history weekly in Account Settings
• Check for unfamiliar devices or locations
• Verify all active sessions are yours
• Review connected third-party applications
• Monitor email notifications for login attempts

Signs of Unauthorized Access

• Login notifications from unfamiliar locations
• Changes to account settings you didn't make
• Trades or notes you don't recognize
• Password reset emails you didn't request
• Unexpected 2FA codes

Immediate Actions if Compromised

1. Change your password immediately
2. Log out all active sessions
3. Enable or reset 2FA
4. Review and revoke suspicious third-party access
5. Contact Ascentia support immediately
6. Check for unauthorized changes to your data

Safe Network Usage

• Use trusted networks: Access Ascentia from secure, private networks when possible
• Avoid public Wi-Fi: Public networks are vulnerable to interception and attacks
• Use a VPN: Virtual Private Networks encrypt your connection on untrusted networks
• Verify HTTPS: Always ensure the URL shows "https://" and a lock icon
• Disable auto-connect: Don't let devices automatically join unknown networks

Home Network Security

• Change default router passwords
• Use WPA3 or WPA2 encryption
• Hide your network SSID if possible
• Keep router firmware updated
• Disable WPS (Wi-Fi Protected Setup)
• Use a strong, unique Wi-Fi password

• Regular backups: Export your trading data regularly as a backup
• Email security: Secure the email account associated with Ascentia
• Browser security: Use updated browsers with security features enabled
• Extension caution: Only install trusted browser extensions
• Screen lock: Lock your screen when stepping away from your device
• Security questions: Use unique, non-obvious answers to security questions
• Stay informed: Keep up with security best practices and threats