Security Settings
Core Security Features
1. Two-Factor Authentication (2FA)
Two-Factor Authentication (2FA) is a critical security feature that adds an extra layer of protection to investor accounts.
- Mandatory for All Users:
All accounts must enable 2FA to enhance security during login and critical transactions. This requirement ensures that even if a password is compromised, unauthorized access is significantly mitigated, protecting both the investor’s assets and sensitive information.
- Authentication Options:
Investors can choose between using a mobile app (e.g., Google Authenticator) or email-based One-Time Passwords (OTPs) for 2FA. These options provide flexibility and convenience while maintaining high security standards, allowing investors to select the method that best fits their preferences and technological capabilities.
- Transaction-Specific OTPs:
Important actions, such as fund transfers, portfolio reallocations, or early redemption requests, trigger OTP authentication. This ensures that sensitive transactions are verified through an additional authentication step, preventing unauthorized or fraudulent activities even if account credentials are exposed.
2. Password Management
Effective password management is essential for maintaining the security and integrity of investor accounts.
- Create Strong Passwords:
Passwords must include a combination of uppercase letters, lowercase letters, numbers, and symbols to enhance security. Strong passwords are less susceptible to brute-force attacks and unauthorized access, ensuring that investor accounts remain protected against common cyber threats.
- Regular Password Updates:
Users are encouraged to update their passwords periodically and avoid reusing old passwords. Regular updates reduce the risk of password-related breaches and help maintain account security over time, especially in response to evolving cyber threats.
- Password Reset:
In case of a forgotten password, users can reset it by clicking the “Forgot Password” link and verifying their identity via email. This streamlined process ensures that investors can regain access to their accounts securely without compromising security protocols.
3. Login Activity Monitoring
Monitoring login activity is crucial for detecting and preventing unauthorized access to investor accounts.
- Real-Time Login Alerts:
Investors receive email or SMS notifications for each login attempt, enabling them to detect any unauthorized access promptly. Real-time alerts provide immediate awareness of potential security breaches, allowing investors to take swift action to secure their accounts.
- Login History:
Investors can review recent logins, including IP addresses, device types, and timestamps, from the Portfolio Dashboard. This detailed history helps in identifying unusual or suspicious activities, providing insights into account access patterns and enhancing overall security monitoring.
- Session Management:
Users can view and terminate active sessions from multiple devices to prevent unauthorized access. This feature allows investors to manage their active sessions proactively, ensuring that only trusted devices maintain access to their accounts.
4. Device and Browser Verification
Ensuring that only trusted devices and browsers can access investor accounts is a fundamental aspect of account security.
- Trusted Device Registration:
Investors can add frequently used devices to a trusted list, minimizing repetitive verification while maintaining security. Trusted devices streamline the login process for regular users without compromising the overall security framework.
- Browser Fingerprinting:
The platform uses browser fingerprinting to detect unrecognized devices and trigger additional authentication requirements. This technology analyzes browser and device characteristics to identify potential unauthorized access attempts, ensuring that only legitimate users can access their accounts.
5. Security Alerts and Notifications
Customizable alerts and notifications keep investors informed about critical activities and potential security issues.
- Customizable Alerts:
Users can customize alerts for activities like login attempts, portfolio changes, and secondary market trades. Tailoring these alerts ensures that investors receive relevant information without being overwhelmed by unnecessary notifications, enhancing their ability to respond to important events.
- Notification Methods:
Investors can choose to receive alerts via email, SMS, or in-app notifications, providing enhanced control over how they are informed about account activities. Multiple notification channels ensure that investors stay informed through their preferred communication methods, improving responsiveness to security events.
6. Fraud Detection and Prevention
Proactive fraud detection systems are essential for identifying and mitigating fraudulent activities within investor accounts.
- Anomaly Detection System:
The platform employs an AI-driven system to identify unusual behavior, such as suspicious login attempts or unexpected fund movements. This advanced system continuously monitors account activities, enabling early detection of potential fraud and minimizing the risk of significant financial losses.
- Temporary Lockdowns:
In case of detected anomalies, the account is temporarily locked, and the user receives immediate instructions for resolution. This measure prevents further unauthorized activities while ensuring that legitimate users can regain control of their accounts through secure verification processes.
7. Recovery Options
Comprehensive recovery options ensure that investors can regain access to their accounts securely in case of emergencies.
- Backup Security Questions:
Users may set security questions as an additional layer for account recovery. These questions provide a means of verifying identity in situations where primary authentication methods are inaccessible, enhancing account recovery reliability.
- Emergency Contact:
Investors have the option to designate a trusted contact for emergency recovery scenarios involving account access. This feature ensures that investors can recover their accounts through a pre-approved individual, adding an extra layer of security and support during critical situations.
8. Third-Party Platform Security
When managing Orbita Notes through third-party platforms, maintaining robust security settings is equally important.
- Use Hardware Wallets:
For additional protection, investors can store assets linked to StellarTerm in hardware wallets like Ledger or Trezor. Hardware wallets provide offline storage of private keys, significantly reducing the risk of digital theft and unauthorized access to investment assets.
- Enable Platform-Specific 2FA:
Ensure that third-party platforms also enforce 2FA for access and transactions. Consistent application of 2FA across all platforms enhances overall security, preventing unauthorized access even if one platform’s security is compromised.
Best Practices for Investors
Adopting best practices in account security enhances the protection of Orbita Notes investments and personal information.
- Monitor Portfolio Regularly:
Regularly review your portfolio and account activity for unauthorized changes. Consistent monitoring helps in early detection of suspicious activities, allowing for prompt responses to potential security threats.
- Avoid Public Networks:
Do not access the platform over public Wi-Fi networks to prevent unauthorized data interception. Using secure, private networks or VPNs ensures that sensitive information remains protected during transmission.
- Keep Software Updated:
Ensure that your browser, mobile app, and authentication tools are up-to-date to avoid security vulnerabilities. Regular updates patch known security flaws, maintaining the integrity and security of your devices and applications used for managing Orbita Notes.