Account Security

VitalHops takes the security of your account and sensitive financial data seriously. This guide covers all the security features available to protect your account.

Password Management

Password Requirements

Your password must meet the following criteria:

• Minimum 8 characters
• At least one uppercase letter
• At least one lowercase letter
• At least one number
• At least one special character

Changing Your Password

1. Go to your Profile settings
2. Click Change Password
3. Enter your current password for verification
4. Enter and confirm your new password
5. Click Update Password

Resetting a Forgotten Password

1. Click Forgot Password on the login page
2. Enter your registered email address
3. Check your inbox for a password reset link
4. Click the link and set a new password

If you signed up with Google and haven't set a password yet, you can set one from your profile settings.

Enabling 2FA

Two-factor authentication adds an extra layer of security by requiring a time-based code from your authenticator app in addition to your password.

Setting Up 2FA

1. Navigate to your Profile settings
2. Find the Two-Factor Authentication section
3. Click Enable 2FA
4. Scan the QR code with an authenticator app (Google Authenticator, Authy, etc.)
5. Enter the 6-digit verification code from the app
6. Save your backup codes in a secure location

Backup Codes

When you enable 2FA, you'll receive a set of backup codes. These are one-time-use codes that let you access your account if you lose access to your authenticator app.

• Store backup codes in a secure, offline location
• Each code can only be used once
• You can regenerate backup codes from your security settings

Disabling 2FA

1. Go to Profile settings
2. Click Disable 2FA
3. Enter a verification code from your authenticator app
4. Confirm the action

2FA is required for sensitive operations like changing your password or phone number.

Phone Number Verification

Adding a verified phone number strengthens your account security:

1. Go to Profile settings
2. Enter your phone number
3. You'll receive an OTP via SMS
4. Enter the OTP to verify your number

Your phone number is used for:

• Account recovery
• Security notifications
• Keep Alive check-in reminders

Session Management

VitalHops tracks your active sessions across devices:

• View all devices where you're currently logged in
• See device type, browser, operating system, and last activity
• Logout from a specific device if you notice suspicious activity
• Logout from all devices for a complete security reset

Brute-Force Protection

Your account is protected against unauthorized access attempts:

• Failed login attempts are tracked and rate-limited
• After multiple failed attempts, your account may be temporarily locked
• You'll receive an email notification about suspicious login activity
• New device logins trigger security alerts with IP and location details

Security Best Practices

• Enable 2FA for maximum account protection
• Use a unique, strong password that you don't reuse elsewhere
• Review your active sessions regularly
• Keep your phone number and email up to date
• Log out from shared or public devices
• Never share your backup codes or password with anyone