Account Integrity and Technical Security Protocols
As your project grows, the value of your account increases. Your account contains sensitive testing reports, prepaid professional slots, and cumulative Karma Points. Protecting these assets requires a combination of platform-level security and local user discipline.
Mandatory Security Measures
Two-Factor Authentication (2FA)
We strongly advocate for the use of 2FA. We utilize the TOTP standard, which is compatible with all major authenticator applications.
- Implementation: Navigate to 'Security Settings' and scan the provided QR code. Once enabled, a unique 6-digit code will be required for every login.
- Why it matters: 2FA protects you against credential stuffing and brute-force attacks.
Robust Password Architecture
Avoid using common phrases or passwords recycled from other services. A professional-grade password should:
- Be at least 14 characters in length.
- Contain a mixture of alphanumeric characters and symbols.
- Utilize a secure password manager to avoid local storage in insecure text files.
Platform Vigilance
Session Auditing
Our platform provides a detailed log of every IP address and device that accesses your account.
- Review Protocol: We recommend checking your 'Recent Activity' log once a month.
- Emergency Lock: If you suspect a breach, use the 'Sign Out of All Other Devices' button and immediately reset your password and 2FA secrets.
Social Engineering Defense
Social engineering is a significant threat to developers.
- Official Communication: All official platform emails will originate from the @intesters.com domain.
- Password Privacy: No member of our staff, including the support lead or developers, will ever ask for your password or your 2FA backup codes.
Automated Security Flags
Our system automatically flags accounts for review if it detects:
- Frequent login attempts from geographically disparate locations in a short timeframe.
- Rapid, unusual point earned/spent cycles.
- Multiple accounts being managed from a single device (sybil detection).
Maintaining the integrity of your account ensures that your testing data remains private and that your credits are always available for your next launch.