Account Security Best Practices
Tips for keeping your account safe
Protecting Your Account
While we implement strong security measures to protect your data, your account security also depends on the precautions you take. Follow these best practices to keep your AskFLC account secure and protect your personal information.
Password Security
Create a Strong Password
Your password is the first line of defense for your account. Make it strong and unique:
Use at least 12 characters - longer passwords are more secure
Mix character types - combine uppercase, lowercase, numbers, and symbols
Avoid common words - don't use dictionary words, names, or dates
Make it unique - never reuse passwords from other websites
Use a passphrase - string together random words for memorability
Use a Password Manager
Password managers help you create and store strong, unique passwords for every site:
Recommended password managers:
- •1Password - User-friendly with excellent security features
- •Bitwarden - Open-source and free option with premium features
- •LastPass - Popular choice with cross-device sync
- •Built-in browser passwords - Chrome, Safari, Firefox offer basic password management
Two-Factor Authentication (2FA)
Extra Layer of Protection
Two-factor authentication (coming soon) adds an extra verification step when logging in:
How 2FA Works:
- You enter your password (something you know)
- You provide a verification code from your phone (something you have)
- Both must match to access your account
Coming Soon: We're adding optional 2FA support for all accounts. Even if someone steals your password, they won't be able to access your account without your phone.
Recognizing Security Threats
Beware of Phishing Attempts
Phishing is when attackers try to trick you into giving away your login credentials:
Red Flags to Watch For:
Urgent or threatening language - "Your account will be closed!" or "Unusual activity detected!"
Suspicious sender - Email from askflc-support@gmail.com instead of @askflc.com
Requests for login information - We'll NEVER ask for your password via email
Suspicious links - Hover over links to check the actual URL before clicking
Poor grammar or spelling - Professional companies proofread their emails
What to Do If You Suspect Phishing:
Don't click links in suspicious emails
Go directly to askflc.com instead of using email links
Forward suspicious emails to security@askflc.com
Change your password immediately if you think you've been compromised
Safe Browsing Habits
Always Use HTTPS
Verify that the URL starts with "https://" and shows a lock icon before entering sensitive information. This ensures your connection is encrypted.
Avoid Public Wi-Fi for Sensitive Activities
Public Wi-Fi networks can be insecure. If you must use them, consider a VPN (Virtual Private Network) to encrypt your connection, or wait until you're on a trusted network.
Log Out on Shared Computers
Always log out completely when using a public or shared computer. Don't rely on just closing the browser - use the "Log Out" button in your account menu.
Keep Software Updated
Regularly update your browser, operating system, and security software. Updates often include important security patches that protect against new threats.
Use Trusted Devices
Avoid logging into your account from devices you don't trust or control. If you must, use a private/incognito browsing window and log out immediately when done.
Managing Active Sessions
Monitor Your Login Activity:
Regularly check where your account is logged in to spot unauthorized access:
View Active Sessions
- Go to Settings → Security
- Click "Active Sessions" or "Where You're Logged In"
- Review the list of devices and locations
- If you see unfamiliar activity, click "Log Out" next to that session
- Use "Log Out All Devices" if you suspect your account is compromised
Tip: We show device type, browser, approximate location, and last active time for each session. This helps you identify legitimate logins from suspicious ones.
What to Do If Your Account Is Compromised
Act Quickly to Secure Your Account
If you believe your account has been accessed without permission:
- Change your password immediately
Go to Settings → Security → Change Password. Choose a strong, unique password you've never used before.
- Log out all other sessions
Settings → Security → Log Out All Devices. This ends all active sessions except your current one.
- Review recent activity
Check your conversation history, uploaded files, and account changes for unauthorized activity.
- Contact our security team
Email security@askflc.com with details about the suspected breach. We'll investigate and help secure your account.
- Check other accounts
If you used the same password elsewhere, change those passwords too. Consider using a password manager going forward.
Privacy-Conscious Sharing
Be Mindful of What You Share
While our AI conversations are private, exercise caution about the information you provide:
Don't share passwords or other sensitive authentication credentials in conversations
Be careful with financial details like full credit card numbers or bank account information
Limit Social Security Numbers and other government IDs unless absolutely necessary
Think before uploading sensitive documents that contain highly confidential information
Security Checklist
Monthly Security Review:
Review active sessions and log out unused devices
Check for any unauthorized account activity
Update your password if you haven't in 3+ months
Review privacy settings and preferences
Ensure your recovery email is current
Report Security Issues
If you discover a security vulnerability in AskFLC, please report it to security@askflc.com. We take all reports seriously and respond quickly to protect our users.