Security and responsible access

Protect access

Use unique passwords and the account’s supported sign-in controls. Sign out on shared devices and do not share browser sessions or login links. Treat the browser shell and site-management actions as privileged capabilities.

Protect secrets and data

Never commit tokens, private keys, passwords, database credentials, or customer exports. Use approved secret storage and rotate a credential if it may have been exposed. Sanitize screenshots and logs before attaching them to support requests.

Change safety

Confirm account, site, and environment before acting. Prefer a reversible, reviewed change and verify the result. Use a recovery point for high-impact work, while remembering that recovery itself is operator-controlled and can overwrite data.