Documentation
Account Settings/Security Settings

Security Settings

Protect your Reverie account with comprehensive security features and best practices

Security Settings

Account security is crucial for protecting your personal information, conversations, and creative work on Reverie. This guide covers all security features and best practices for maintaining a secure account.

Account Authentication

Password Security

Password Requirements:

  • Minimum 8 characters with combination of letters, numbers, and symbols
  • Regular password updates recommended every 3-6 months
  • Unique password not used on other platforms or services
  • Password strength indicator guides creation of secure passwords

Changing Your Password:

  1. Navigate to Settings > Security > Password
  2. Enter your current password for verification
  3. Create new password meeting security requirements
  4. Confirm password change with email verification
  5. All active sessions will be logged out for security

Password Recovery:

  • Email Recovery: Reset password using registered email address
  • Security Questions: Additional verification through preset security questions
  • Account Recovery: Contact support for assistance with locked accounts
  • Backup Codes: Generate one-time use backup codes for emergency access

Two-Factor Authentication (2FA)

Setting Up 2FA:

  1. Access 2FA Settings: Go to Settings > Security > Two-Factor Authentication
  2. Choose 2FA Method: Authenticator app (recommended) or SMS
  3. Scan QR Code: Use authenticator app to scan setup QR code
  4. Verify Setup: Enter generated code to confirm 2FA configuration
  5. Save Backup Codes: Store emergency backup codes in secure location

Supported 2FA Methods:

  • Authenticator Apps: Google Authenticator, Authy, Microsoft Authenticator
  • SMS Verification: Text message codes to registered phone number
  • Email Codes: Backup verification through email (if primary method fails)
  • Hardware Keys: FIDO2/WebAuthn compatible security keys (advanced users)

Managing 2FA:

  • View Active Methods: Check which 2FA methods are currently enabled
  • Backup Codes: Generate new codes and securely store them
  • Remove 2FA: Disable 2FA with proper verification (not recommended)
  • Update Phone Number: Change SMS verification number when needed

Session Management

Active Sessions Monitoring

Session Overview:

  • Current Session: Device and browser you're currently using
  • Active Sessions: All logged-in devices and applications
  • Session Details: Location, device type, last activity time
  • Suspicious Activity: Alerts for unusual login patterns or locations

Managing Sessions:

  • Remote Logout: Terminate sessions on other devices
  • Logout All: Sign out of all devices except current session
  • Session History: Review past login activity and access patterns
  • Device Recognition: Mark trusted devices for streamlined access

Login Security

Secure Login Practices:

  • Browser Security: Use updated browsers with security features enabled
  • Public WiFi Caution: Avoid account access on unsecured networks
  • Shared Device Safety: Always log out completely on shared computers
  • Suspicious Activity Reporting: Report unusual account activity immediately

Login Alerts:

  • New Device Notifications: Email alerts for logins from unrecognized devices
  • Location Monitoring: Alerts for logins from unusual geographical locations
  • Failed Login Attempts: Notifications about unsuccessful login attempts
  • Security Breach Alerts: Immediate notification of any security concerns

Data Protection and Privacy

Personal Information Security

Data Encryption:

  • Account Information: Personal details encrypted at rest and in transit
  • Conversation History: All chat data protected with industry-standard encryption
  • Payment Information: Credit card and billing data secured through certified processors

Privacy Controls:

  • Data Visibility: Control who can see your profile and activity
  • Conversation Privacy: Manage sharing and visibility of chat histories
  • Character Interaction: Control information sharing with character creators
  • Community Participation: Set preferences for public community engagement

Advanced Security Features

Account Recovery

Recovery Methods:

  • Email Recovery: Primary recovery method through verified email address
  • Backup Email: Secondary email for account recovery situations
  • Security Questions: Additional verification through personal questions
  • Support Recovery: Assisted recovery through customer support verification

Recovery Preparation:

  • Contact Information: Keep email addresses current and accessible
  • Backup Codes: Store 2FA backup codes in secure, accessible location
  • Security Questions: Choose memorable answers and store securely
  • Recovery Planning: Document recovery procedures for peace of mind

Security Best Practices

General Security Guidelines

Account Hygiene:

  • Regular Password Updates: Change passwords every 3-6 months
  • Unique Passwords: Never reuse Reverie password on other platforms
  • Session Management: Regularly review and clean up active sessions
  • Software Updates: Keep browsers and security software up to date

Threat Awareness:

  • Phishing Protection: Verify all emails claiming to be from Reverie
  • Social Engineering: Be cautious of requests for account information
  • Public Sharing: Avoid sharing account details or login information
  • Scam Recognition: Report suspicious contacts claiming Reverie affiliation

Incident Response

Security Incident Reporting:

  • Immediate Action: Change passwords and enable 2FA if not already active
  • Platform Notification: Report security incidents to Reverie support immediately
  • Documentation: Keep records of suspicious activity and correspondence
  • Follow-up: Work with support team to resolve security issues

Account Compromise Response:

  1. Immediate Lockdown: Change password and terminate all sessions
  2. Security Audit: Review account activity for unauthorized access
  3. Data Assessment: Check for any unauthorized changes or data access
  4. Support Contact: Report incident to Reverie security team
  5. Recovery Process: Follow guided recovery with support assistance

Data Protection Compliance

GDPR Compliance (European users):

  • Data Rights: Access, rectification, deletion, and portability rights
  • Consent Management: Control over data processing and usage
  • Legal Basis: Clear explanation of data processing legal foundations
  • Data Protection Officer: Contact information for privacy concerns

Regional Compliance:

  • CCPA Compliance: California Consumer Privacy Act protections
  • Regional Laws: Compliance with applicable local data protection laws
  • International Transfers: Secure data transfer mechanisms where required
  • Legal Updates: Regular updates to maintain compliance with evolving regulations

Terms of Service and Privacy

Account Responsibilities:

  • Terms Compliance: Understanding and following platform terms of service
  • Community Guidelines: Adherence to community standards and behavior expectations
  • Security Cooperation: Working with platform security measures and investigations
  • Legal Obligations: Compliance with applicable laws and regulations

Privacy Policy Understanding:

  • Data Collection: What information is collected and how it's used
  • Data Sharing: When and with whom information might be shared
  • User Controls: What choices you have regarding your data
  • Policy Updates: How changes to privacy policy are communicated

Security is a shared responsibility between Reverie and our users. Following these security best practices helps protect your account, conversations, and creative work while ensuring a safe experience for the entire community.

Next steps:

Security Settings | Documentation | Reverie