Keep workspace access intentional.

Use individual accounts

Give each team member their own account and appropriate permissions. Avoid sharing passwords between people.

Use the available account protections

Enable two-factor authentication, keep recovery codes somewhere safe, and review active sessions when account access changes.

Review sharing before sending

Check the recipients and permissions on invitations and shared order or subscription links. Remove access that is no longer needed.

Keep secrets out of conversations

Do not include passwords, API keys or payment card details in support requests or ordinary client messages. Enter payment credentials only in the designated integration settings.