Security Settings

Protect your wallmarkets account with robust security features and best practices.

Password Security

Changing Your Password

1. Go to Settings > Security
2. Click Change Password
3. Enter current password
4. Enter new password (twice)
5. Click Update Password

Strong Password Requirements

Your password must: - Be at least 12 characters long - Include uppercase and lowercase letters - Contain at least one number - Include at least one special character - Not be a previously used password - Not contain your name or email

Password Tips

✅ Use a unique password for wallmarkets ✅ Consider a password manager ✅ Change password every 90 days ✅ Never share your password ✅ Don't reuse passwords across sites

Two-Factor Authentication (2FA)

Why Enable 2FA?

Adds extra security layer: - Protects against password theft - Required for sensitive operations - Blocks unauthorized access - Industry best practice

Setting Up 2FA

Option 1: Authenticator App (Recommended) 1. Go to Security > Two-Factor Authentication 2. Click Enable 2FA 3. Scan QR code with app (Google Authenticator, Authy) 4. Enter 6-digit code 5. Save backup codes

Option 2: SMS 1. Select SMS Verification 2. Enter phone number 3. Verify with code sent via text 4. Confirm setup

Option 3: Security Key (Most Secure) 1. Insert physical security key (YubiKey, etc.) 2. Register key with account 3. Test key works 4. Add backup key

Backup Codes

When you enable 2FA: - Receive 10 single-use backup codes - Download and save securely - Use if you lose phone/key - Generate new codes anytime

Managing 2FA

• View active 2FA methods
• Add multiple methods
• Remove old methods
• Regenerate backup codes
• Require 2FA for all users (Owners)

Active Sessions

Viewing Active Sessions

See where you're logged in: - Device type (Desktop, Mobile) - Browser name and version - IP address - Location (approximate) - Last active time - Current session indicator

Ending Sessions

• Click Sign Out next to any session
• Sign Out All Other Sessions button
• Current session remains active
• Logged-out devices must re-authenticate

When to End Sessions

End sessions if you: - Left account open on public computer - Suspect unauthorized access - Lost a device - Changed password - See unfamiliar locations

Login History

Review past logins: - Date and time - IP address - Location - Device and browser - Success or failure - Export for security audit

Suspicious Activity Alerts

Automatic alerts for: - Login from new location - Multiple failed attempts - Login from new device - Unusual time of access - Rapid location changes

IP Restrictions

Whitelist IP Addresses

Enterprise feature: 1. Go to Security > IP Restrictions 2. Click Add IP Address 3. Enter IP or IP range 4. Save changes 5. Only whitelisted IPs can access

Good for: - Office-only access - VPN-required access - High-security needs

Blacklist IP Addresses

Block specific IPs: - Identify suspicious IPs - Add to blacklist - Immediate block - Review regularly

API Key Security

If using API: - Generate unique keys - Set expiration dates - Limit key permissions - Rotate keys regularly - Never commit to code - Use environment variables

API Key Best Practices

✅ One key per application ✅ Revoke unused keys ✅ Monitor key usage ✅ Set rate limits ✅ Rotate every 90 days

Data Encryption

Your data is protected: - In Transit: TLS 1.3 encryption - At Rest: AES-256 encryption - Backups: Encrypted backups - Database: Encrypted columns

Privacy Settings

Control your data: - Who can see your activity - Data sharing preferences - Marketing communications - Analytics tracking - Cookie preferences

Account Recovery

Recovery Email

Set up recovery email: - Different from primary email - Used for password resets - Receives security alerts - Keep up to date

Security Questions

Set 3 security questions: - Choose carefully - Answers only you know - Don't use public info - Update if compromised

Account Recovery Process

If locked out: 1. Click Forgot Password 2. Enter email address 3. Answer security question 4. Receive reset link via recovery email 5. Create new password

Security Notifications

Get notified about: - Password changes - New device logins - Failed login attempts - Permission changes - Account settings updates - Suspicious activity

Configure: - Email notifications (always on) - SMS alerts (optional) - Push notifications (optional) - Notification frequency

Compliance & Certifications

wallmarkets maintains: - SOC 2 Type II: Annual audit - ISO 27001: Information security - GDPR: EU data protection - CCPA: California privacy - PCI DSS: Payment security (Level 1)

Data Privacy

Your Rights

You can: - Export all your data - Request data deletion - Opt out of marketing - Access privacy logs - Update consent preferences

GDPR Compliance

For EU users: - Right to be forgotten - Data portability - Consent management - DPO contact information - Processing agreements

Security Audit

Running Security Checks

Monthly security review: 1. Check active sessions 2. Review login history 3. Update password 4. Verify 2FA is enabled 5. Check user permissions 6. Review API keys 7. Update recovery info

Security Score

View your security score: - Password strength - 2FA enabled? - Recent password change - Active sessions count - User permission reviews - API key hygiene

Incident Response

If you suspect a breach: 1. Change password immediately 2. Enable 2FA if not already 3. End all sessions 4. Review login history 5. Contact support 6. Review account activity 7. Alert team members

Best Practices

✅ Enable 2FA on all accounts ✅ Use unique, strong passwords ✅ Review sessions monthly ✅ Keep recovery email current ✅ Monitor login alerts ✅ Train team on security ✅ Report suspicious activity ✅ Regular security audits

Security Features by Plan

Feature	Starter	Pro	Business	Enterprise
Password Protection	✅	✅	✅	✅
2FA	✅	✅	✅	✅
Session Management	✅	✅	✅	✅
Login History	30 days	90 days	1 year	Unlimited
IP Restrictions	❌	❌	✅	✅
SSO	❌	❌	❌	✅
Audit Logs	Basic	Advanced	Advanced	Custom
Security Support	Email	Priority	Phone	Dedicated

Reporting Security Issues

Found a vulnerability? - Email security@wallmarkets.store - Include detailed description - Steps to reproduce - Potential impact - Your contact info

We offer: - Responsible disclosure program - Bug bounty rewards - Public acknowledgment - Coordinated disclosure

Additional Resources

• Security Whitepaper
• Privacy Policy
• Terms of Service
• Compliance Certifications
• Security Blog

Need Help?

Contact security team: - Email: security@wallmarkets.store - Emergency: Available 24/7 - Response time: <4 hours - PGP Key available