Security Best Practices

Protecting your company’s spend data starts with a secure account. Follow these guidelines to maintain the highest level of security.

🛡️ Core Security Recommendations

• Use Unique Passwords: Avoid reusing passwords from other platforms. Use a dedicated password manager to generate and store strong, unique credentials.
• Enable 2FA: Always activate Two-Factor Authentication. This ensures that even if your password is compromised, your account remains protected.
• Credential Confidentiality: Never share your login details, API keys, or verification codes with anyone. SpendCraft staff will never ask for your password.
• Secure Your Session: Always Sign Out when you are finished, especially when using shared devices or public networks.
• Routine Updates: We recommend rotating your password every 3–6 months to minimize the risk of long-term credential exposure.

🖥️ Device & Network Safety

• Keep Software Updated: Ensure your browser and operating system have the latest security patches installed.
• Use Trusted Networks: Access SpendCraft via a secure, private connection or a company-approved VPN. Avoid public Wi-Fi for sensitive data management.