Protect sign-in
- Use strong, unique passwords and individual team logins.
- Enable two-factor authentication where available.
- Grant only the permissions each person needs and remove access when they leave.
Protect integrations
Treat API keys and AI connector credentials like passwords. Keep them out of shared chats and public code, restrict their permissions and rotate exposed credentials.
Suspected compromise
Change affected credentials, review team access and recent actions, and contact support promptly. Never send passwords, full payment details or active access tokens in a ticket.