Security Settings
Protect your Reverie account with comprehensive security features and best practices
Security Settings
Account security is crucial for protecting your personal information, conversations, and creative work on Reverie. This guide covers all security features and best practices for maintaining a secure account.
Account Authentication
Password Security
Password Requirements:
- Minimum 8 characters with combination of letters, numbers, and symbols
- Regular password updates recommended every 3-6 months
- Unique password not used on other platforms or services
- Password strength indicator guides creation of secure passwords
Changing Your Password:
- Navigate to Settings > Security > Password
- Enter your current password for verification
- Create new password meeting security requirements
- Confirm password change with email verification
- All active sessions will be logged out for security
Password Recovery:
- Email Recovery: Reset password using registered email address
- Security Questions: Additional verification through preset security questions
- Account Recovery: Contact support for assistance with locked accounts
- Backup Codes: Generate one-time use backup codes for emergency access
Two-Factor Authentication (2FA)
Setting Up 2FA:
- Access 2FA Settings: Go to Settings > Security > Two-Factor Authentication
- Choose 2FA Method: Authenticator app (recommended) or SMS
- Scan QR Code: Use authenticator app to scan setup QR code
- Verify Setup: Enter generated code to confirm 2FA configuration
- Save Backup Codes: Store emergency backup codes in secure location
Supported 2FA Methods:
- Authenticator Apps: Google Authenticator, Authy, Microsoft Authenticator
- SMS Verification: Text message codes to registered phone number
- Email Codes: Backup verification through email (if primary method fails)
- Hardware Keys: FIDO2/WebAuthn compatible security keys (advanced users)
Managing 2FA:
- View Active Methods: Check which 2FA methods are currently enabled
- Backup Codes: Generate new codes and securely store them
- Remove 2FA: Disable 2FA with proper verification (not recommended)
- Update Phone Number: Change SMS verification number when needed
Session Management
Active Sessions Monitoring
Session Overview:
- Current Session: Device and browser you're currently using
- Active Sessions: All logged-in devices and applications
- Session Details: Location, device type, last activity time
- Suspicious Activity: Alerts for unusual login patterns or locations
Managing Sessions:
- Remote Logout: Terminate sessions on other devices
- Logout All: Sign out of all devices except current session
- Session History: Review past login activity and access patterns
- Device Recognition: Mark trusted devices for streamlined access
Login Security
Secure Login Practices:
- Browser Security: Use updated browsers with security features enabled
- Public WiFi Caution: Avoid account access on unsecured networks
- Shared Device Safety: Always log out completely on shared computers
- Suspicious Activity Reporting: Report unusual account activity immediately
Login Alerts:
- New Device Notifications: Email alerts for logins from unrecognized devices
- Location Monitoring: Alerts for logins from unusual geographical locations
- Failed Login Attempts: Notifications about unsuccessful login attempts
- Security Breach Alerts: Immediate notification of any security concerns
Data Protection and Privacy
Personal Information Security
Data Encryption:
- Account Information: Personal details encrypted at rest and in transit
- Conversation History: All chat data protected with industry-standard encryption
- Payment Information: Credit card and billing data secured through certified processors
Privacy Controls:
- Data Visibility: Control who can see your profile and activity
- Conversation Privacy: Manage sharing and visibility of chat histories
- Character Interaction: Control information sharing with character creators
- Community Participation: Set preferences for public community engagement
Advanced Security Features
Account Recovery
Recovery Methods:
- Email Recovery: Primary recovery method through verified email address
- Backup Email: Secondary email for account recovery situations
- Security Questions: Additional verification through personal questions
- Support Recovery: Assisted recovery through customer support verification
Recovery Preparation:
- Contact Information: Keep email addresses current and accessible
- Backup Codes: Store 2FA backup codes in secure, accessible location
- Security Questions: Choose memorable answers and store securely
- Recovery Planning: Document recovery procedures for peace of mind
Security Best Practices
General Security Guidelines
Account Hygiene:
- Regular Password Updates: Change passwords every 3-6 months
- Unique Passwords: Never reuse Reverie password on other platforms
- Session Management: Regularly review and clean up active sessions
- Software Updates: Keep browsers and security software up to date
Threat Awareness:
- Phishing Protection: Verify all emails claiming to be from Reverie
- Social Engineering: Be cautious of requests for account information
- Public Sharing: Avoid sharing account details or login information
- Scam Recognition: Report suspicious contacts claiming Reverie affiliation
Incident Response
Security Incident Reporting:
- Immediate Action: Change passwords and enable 2FA if not already active
- Platform Notification: Report security incidents to Reverie support immediately
- Documentation: Keep records of suspicious activity and correspondence
- Follow-up: Work with support team to resolve security issues
Account Compromise Response:
- Immediate Lockdown: Change password and terminate all sessions
- Security Audit: Review account activity for unauthorized access
- Data Assessment: Check for any unauthorized changes or data access
- Support Contact: Report incident to Reverie security team
- Recovery Process: Follow guided recovery with support assistance
Compliance and Legal
Data Protection Compliance
GDPR Compliance (European users):
- Data Rights: Access, rectification, deletion, and portability rights
- Consent Management: Control over data processing and usage
- Legal Basis: Clear explanation of data processing legal foundations
- Data Protection Officer: Contact information for privacy concerns
Regional Compliance:
- CCPA Compliance: California Consumer Privacy Act protections
- Regional Laws: Compliance with applicable local data protection laws
- International Transfers: Secure data transfer mechanisms where required
- Legal Updates: Regular updates to maintain compliance with evolving regulations
Terms of Service and Privacy
Account Responsibilities:
- Terms Compliance: Understanding and following platform terms of service
- Community Guidelines: Adherence to community standards and behavior expectations
- Security Cooperation: Working with platform security measures and investigations
- Legal Obligations: Compliance with applicable laws and regulations
Privacy Policy Understanding:
- Data Collection: What information is collected and how it's used
- Data Sharing: When and with whom information might be shared
- User Controls: What choices you have regarding your data
- Policy Updates: How changes to privacy policy are communicated
Security is a shared responsibility between Reverie and our users. Following these security best practices helps protect your account, conversations, and creative work while ensuring a safe experience for the entire community.
Next steps: