> ## Documentation Index
> Fetch the complete documentation index at: https://support.rallies.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Account Security Best Practices

> Keep your Rallies account secure with these best practices for passwords, two-factor authentication, and safe usage.

# Account Security Best Practices

Protecting your Rallies account helps keep your investment research private and secure.

## Strong Password

### Requirements

* At least 8 characters
* Mix of letters, numbers, and symbols recommended

### Best Practices

* **Use a unique password** - Don't reuse passwords from other sites
* **Use a password manager** - Tools like 1Password, Bitwarden, or Apple Keychain
* **Avoid personal info** - Don't use birthdays, names, or common words
* **Make it long** - Longer passwords are stronger (12+ characters ideal)

### Example of a Strong Password

```
Tr@ding2024!Secure
```

Better yet, use a random password generator:

```
k8$mP2nX@qL9vR4w
```

## Enable Two-Factor Authentication (2FA)

2FA adds a second layer of security beyond your password.

### How It Works

1. Enter your password
2. Enter a code from your authenticator app
3. Only then are you logged in

### Benefits

* Even if someone steals your password, they can't access your account
* Protects against phishing attacks
* Industry-standard security measure

[Set up 2FA →](/account/two-factor-authentication)

## Link Google or Apple Sign-In

Social sign-in leverages the security of Google and Apple:

* **Google:** Uses Google's advanced threat protection
* **Apple:** Uses Face ID/Touch ID for biometric security

Both are more secure than a simple password.

[Link social accounts →](/account/link-social)

## Recognize Phishing Attempts

### Red Flags

* Emails asking for your password (we never do this)
* Urgent messages about "account suspension"
* Links that don't go to rallies.ai
* Misspelled domains (raIlies.ai, rallles.ai)
* Requests to "verify" by entering credentials

### Safe Practices

* **Check the URL** - Always verify you're on rallies.ai
* **Don't click email links** - Go directly to the site instead
* **When in doubt, don't** - Contact support to verify
* **Report phishing** - Forward suspicious emails to support

## Keep Your Email Secure

Your email is the key to your account (password resets go there):

* Use a strong, unique password for your email
* Enable 2FA on your email account
* Don't share your email password with anyone

## Session Security

### Sign Out on Shared Devices

* Always log out when using public computers
* Don't check "Remember me" on shared devices
* Close the browser when done

### Review Active Sessions

1. Go to **Settings → Security → Active Sessions**
2. Review devices logged into your account
3. Click **"Sign out"** on any you don't recognize

## Suspicious Activity

### Warning Signs

* Login alerts from unknown locations
* Password reset emails you didn't request
* Changes to your account you didn't make
* Missing watchlists or settings changes

### What to Do

1. **Change your password immediately**
2. **Enable 2FA** if not already enabled
3. **Review active sessions** and sign out unknown devices
4. **Contact support** if you believe you were compromised

## What Rallies Does to Protect You

### Security Measures

* **Encryption:** All data encrypted in transit (TLS) and at rest
* **Password hashing:** We never store your actual password
* **Rate limiting:** Protection against brute force attacks
* **Monitoring:** Automated detection of suspicious activity
* **No SMS 2FA:** We use app-based 2FA (more secure than SMS)

### Our Commitments

* We never ask for your password via email or chat
* We never share your data without consent
* We promptly disclose any security incidents

***

## Security Checklist

Use this checklist to secure your account:

* [ ] Strong, unique password (12+ characters)
* [ ] Two-factor authentication enabled
* [ ] Google or Apple sign-in linked (optional but recommended)
* [ ] Recovery email verified and secure
* [ ] Active sessions reviewed
* [ ] Password manager in use

***

## Related Articles

* [Setting Up Two-Factor Authentication](/account/two-factor-authentication)
* [Changing Your Password](/account/change-password)
* [Linking Social Accounts (Google/Apple)](/account/link-social)
* [I Can't Log In to My Account](/troubleshooting/cant-log-in)