Password & Account Security

Changing Your Password

Update Password (Logged In)

1. Go to Dashboard → Settings
2. Click "Security" tab
3. Enter current password
4. Enter new password (twice)
5. Click "Update Password"
6. Confirmation email sent

Password Requirements

Your password must:

• ✅ Be at least 8 characters long
• ✅ Include uppercase letter (A-Z)
• ✅ Include lowercase letter (a-z)
• ✅ Include number (0-9)
• ✅ Include special character (!@#$%^&*)

Strong Password Examples

Forgot Password?

1. Go to login page
2. Click "Forgot Password?"
3. Enter your email address
4. Check email for reset link
5. Click link (valid for 1 hour)
6. Set new password
7. Log in with new password

Security Best Practices

Password Security

• ✅ Use unique password (not used elsewhere)
• ✅ Change password every 6 months
• ✅ Never share your password
• ✅ Use password manager
• ❌ Don't write password down
• ❌ Don't save in browser (on public computers)
• ❌ Don't email password to anyone

Account Protection

• Log out: Always log out on shared computers
• HTTPS: Check for padlock icon in browser
• Updates: Keep browser and OS updated
• Antivirus: Use reliable antivirus software

Email Security

Protect your registered email:

• Enable 2FA on email account
• Use strong email password
• Don't click suspicious links
• Verify sender before clicking

Recognize Phishing

Starting Line will NEVER:

• ❌ Ask for your password via email
• ❌ Request banking PIN or OTP
• ❌ Send suspicious links or attachments
• ❌ Threaten account suspension
• ❌ Request personal info via email

Public Computers

If using public/shared computer:

• Use private/incognito browsing mode
• Clear browser history after
• Always log out completely
• Don't save passwords in browser
• Close all windows when done

Account Recovery

Can't Access Account

If locked out:

1. Try password reset process first
2. Check spam folder for reset email
3. Wait 10 minutes and try again
4. Try different browser
5. Contact support if still blocked

Account Locked

Accounts lock after 5 failed login attempts:

• Automatic unlock after 30 minutes
• Or use password reset to unlock immediately
• Contact support if urgent

Email Address Changed

To update your email:

1. Log in with current email
2. Settings → Profile
3. Update email address
4. Verify new email (link sent)
5. Old email remains active until verified

Compromised Account

If you suspect unauthorized access:

1. Immediate: Change password
2. Review recent activity/logins
3. Check for unauthorized events
4. Email security@startingline.co.za
5. Review banking details
6. Update recovery email

Session Management

• Sessions expire after 24 hours inactivity
• Manual logout ends session immediately
• Can view active sessions in settings
• Logout all devices option available

Data Protection

Your data is protected:

• 🔒 SSL/TLS encryption in transit
• 🔒 AES-256 encryption at rest
• 🔒 Regular security audits
• 🔒 PCI-DSS compliant
• 🔒 POPIA compliant

Report Security Issues

Found a security vulnerability?

• Email: security@startingline.co.za
• Don't post publicly
• Provide detailed description
• We respond within 24 hours
• Responsible disclosure appreciated