Account Security
Best practices for keeping your Viewert account safe, plus details on how we protect your data.
Password Security
Your password is hashed with bcrypt (cost factor 12) before storage. We never store or log your plaintext password. Choose a strong, unique password that you don't reuse on other sites.
Session Management
Viewert tracks your active sessions. Each session is tied to a hashed token and records the device, browser, and IP address. You can:
View active sessions
See all devices currently signed into your account.
Revoke sessions
Sign out any device remotely by revoking its session.
Sign out everywhere
Revoke all sessions at once if you suspect unauthorized access.
Password Reset
If you forget your password, use the "Forgot Password" link on the sign-in page. A secure reset link is sent to your email. The link expires in 1 hour, can only be used once, and revokes all existing sessions for your protection.
Google Sign-In
Security Tips
Keep your account safe with these practices:
Use a unique password
Don't reuse passwords from other services.
Review sessions regularly
Check Settings → Sessions periodically for unfamiliar devices.
Keep your email secure
Your email is the recovery method for your account. Protect it.
Sign out on shared devices
Always sign out when using a public or shared computer.