Account security best practices

Protect sign-in access

• Use a unique password stored in a reputable password manager.
• Enable email-based two-factor authentication.
• Do not reuse passwords or approve unexpected verification requests.
• Sign out on shared devices and keep the browser, operating system, and device lock current.

Protect client information

• Use the minimum information needed for the workflow.
• Confirm the client before sending a message, assignment, invitation, or care offer.
• Do not place sensitive information in template names, support tickets, or unapproved exports.
• Review team roles and remove access promptly when responsibilities change.

Respond to a suspected incident

1. 1
   Secure the account

   Change the password, verify two-factor settings, and end untrusted access when available.

2. 2
   Notify the appropriate contact

   Follow the organization’s security and privacy incident process and contact support@habitofcare.com.

3. 3
   Preserve useful details

   Record times, visible actions, and affected accounts without spreading sensitive information.