Complete Account Security Guide

Password Security

A strong password is your first line of defense against unauthorized access to your digiMall account.

Creating a Strong Password

Your password should meet these requirements:

• Minimum 8 characters - Longer passwords are more secure
• Uppercase letters - Include at least one capital letter
• Lowercase letters - Include at least one lowercase letter
• Numbers - Include at least one digit
• Special characters - Use symbols like @, #, $, %, etc.
• Avoid common patterns - Don't use sequential numbers or keyboard patterns

Password Manager Recommendations

We strongly recommend using a password manager to generate and store unique passwords for all your accounts:

• Generates strong, unique passwords automatically
• Stores passwords securely with encryption
• Auto-fills login forms for convenience
• Alerts you to compromised passwords
• Works across all your devices

Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security by requiring a second verification step when logging in.

How 2FA Works

1. Enter your username and password (first factor)
2. Provide a verification code from your phone or authenticator app (second factor)
3. Access is granted only when both factors are verified

Setting Up 2FA

1. Go to Account Security Settings
2. Click "Enable Two-Factor Authentication"
3. Choose your preferred method:
   • Authenticator App (recommended) - Use apps like Google Authenticator, Authy, or Microsoft Authenticator
   • SMS - Receive codes via text message
4. Follow the setup instructions
5. Save your backup codes in a secure location

Login Monitoring

digiMall automatically monitors your account for suspicious login activity and provides tools to track access.

Security Activity Log

Your security activity log shows:

• Recent login attempts (successful and failed)
• Device and browser information
• IP addresses and locations
• Timestamps for all activities
• Password changes and security updates

Login Alerts

Enable login notifications to receive alerts when:

• Your account is accessed from a new device
• Login occurs from an unusual location
• Multiple failed login attempts are detected
• Your password is changed

Device Management

Manage all devices that have access to your digiMall account.

Active Sessions

View and manage all active sessions across your devices:

• See which devices are currently logged in
• Review login dates and locations
• Remotely log out suspicious sessions
• Set automatic session expiration

Device Trust Settings

• Trusted Devices - Mark frequently used devices as trusted to reduce 2FA prompts
• Unknown Device Alerts - Get notified when new devices access your account
• Session Timeout - Automatically log out inactive sessions

Security Alerts

Stay informed about important security events with customizable alert preferences.

Alert Types

• Login Alerts - New device logins and unusual access patterns
• Account Changes - Password updates, email changes, profile modifications
• Security Incidents - Failed login attempts, suspicious activity
• Data Access - Profile views, data exports, account activity

Notification Channels

• Email Notifications - Detailed security alerts sent to your registered email
• SMS Alerts - Critical security notifications via text message
• Push Notifications - Real-time alerts through the digiMall app
• In-App Notifications - Security messages in your account dashboard

Security Best Practices

Daily Security Habits

• Always log out when using shared computers
• Don't share your login credentials with anyone
• Use secure networks for online shopping
• Keep your browser and devices updated
• Review your account activity regularly

What to Do If Your Account is Compromised

1. Change your password immediately using a secure device
2. Enable 2FA if not already activated
3. Review recent activity for unauthorized actions
4. Log out all sessions from your security settings
5. Contact support if you notice suspicious activity
6. Check linked accounts and update passwords for related services

Account Recovery Planning

Prepare for account recovery by ensuring you have:

• Updated recovery email address
• Verified phone number for account recovery
• Secure storage of 2FA backup codes
• Documentation of security questions and answers