[{"data":1,"prerenderedAt":206},["ShallowReactive",2],{"help-\u002Fhelp\u002Faccount\u002Fsecurity":3,"help-navigation":147,"help-surround-\u002Fhelp\u002Faccount\u002Fsecurity":203},{"id":4,"title":5,"body":6,"description":139,"extension":140,"meta":141,"navigation":142,"path":143,"seo":144,"stem":145,"__hash__":146},"helpArticles\u002Fhelp\u002F3.account\u002F2.security.md","Account Security",{"type":7,"value":8,"toc":129},"minimark",[9,13,17,22,30,34,41,44,48,64,68,71,97,101,108,111,115],[10,11,5],"h1",{"id":12},"account-security",[14,15,16],"p",{},"Your security is a top priority. Here is how the Logbook App protects your account and data.",[18,19,21],"h2",{"id":20},"authentication","Authentication",[14,23,24,25,29],{},"The Logbook App uses ",[26,27,28],"strong",{},"passwordless email authentication"," via one-time verification codes. This eliminates the risk of weak or reused passwords. Where it is offered, you can sign in with Google instead.",[18,31,33],{"id":32},"data-isolation","Data isolation",[14,35,36,37,40],{},"Your content lives in the ",[26,38,39],{},"space"," it was written in, and each space has a\ndatabase of its own. Your own record — notifications, devices, sign-in\nhistory — is kept in another, private to you.",[14,42,43],{},"That means isolation runs along two lines, and it is worth knowing which is\nwhich. No space can see another space's content, and there is no shared database\nwhere a single breach could expose many people's. Within a space, though,\neveryone who is a member can read and write everything in it: sharing a space is\nwhat sharing means here, and it is undone by removing the member, which also\ncloses any connection they still have open.",[18,45,47],{"id":46},"encryption","Encryption",[49,50,51,58],"ul",{},[52,53,54,57],"li",{},[26,55,56],{},"In transit",": all connections use TLS (HTTPS)",[52,59,60,63],{},[26,61,62],{},"At rest",": everything we store is encrypted at rest",[18,65,67],{"id":66},"session-management","Session management",[14,69,70],{},"Sessions use secure, HTTP-only cookies with the following protections:",[49,72,73,79,85,91],{},[52,74,75,78],{},[26,76,77],{},"Cross-site request protection",": sign-in cookies are not sent on requests started by another site, and the server additionally refuses authentication requests that did not come from this app's own address",[52,80,81,84],{},[26,82,83],{},"Session expiry",": sessions expire after 7 days of inactivity",[52,86,87,90],{},[26,88,89],{},"Strict CSP",": Content Security Policy with nonces prevents cross-site scripting",[52,92,93,96],{},[26,94,95],{},"Encrypted session storage",": session records are held encrypted, and are keyed by a\none-way hash rather than by the session token itself",[18,98,100],{"id":99},"signing-out-other-devices","Signing out other devices",[14,102,103,104,107],{},"Your account settings list every device you are currently signed in on, with the approximate\nlocation and the date it signed in. ",[26,105,106],{},"Sign out other sessions"," ends all of them except the\none you are using.",[14,109,110],{},"Sign-outs can take up to a minute to reach every location, because sessions are stored\nacross a global network. If you believe your account is compromised, sign the other sessions\nout and then contact support.",[18,112,114],{"id":113},"recommendations","Recommendations",[49,116,117,120,123,126],{},[52,118,119],{},"Use a unique email address for your account",[52,121,122],{},"Keep your email account secure (it is your authentication factor)",[52,124,125],{},"Sign out when using shared devices: a signed-in browser keeps a copy of your spaces so the app works offline, and signing out deletes it",[52,127,128],{},"Review your active sessions periodically in account settings",{"title":130,"searchDepth":131,"depth":131,"links":132},"",2,[133,134,135,136,137,138],{"id":20,"depth":131,"text":21},{"id":32,"depth":131,"text":33},{"id":46,"depth":131,"text":47},{"id":66,"depth":131,"text":67},{"id":99,"depth":131,"text":100},{"id":113,"depth":131,"text":114},"How your account and data are protected.","md",{},true,"\u002Fhelp\u002Faccount\u002Fsecurity",{"title":5,"description":139},"help\u002F3.account\u002F2.security","_UxOgLJUae79FU2LWnsssXl4xyqvMCfFXRtYNiHl9rk",[148],{"title":149,"path":150,"stem":151,"children":152,"page":188},"Help","\u002Fhelp","help",[153,167,189],{"title":154,"path":155,"stem":156,"children":157},"Getting Started","\u002Fhelp\u002Fgetting-started","help\u002F1.getting-started\u002F1.index",[158,159,163],{"title":154,"path":155,"stem":156},{"title":160,"path":161,"stem":162},"Create an Account","\u002Fhelp\u002Fgetting-started\u002Fcreate-account","help\u002F1.getting-started\u002F2.create-account",{"title":164,"path":165,"stem":166},"Create Your First Logbook","\u002Fhelp\u002Fgetting-started\u002Ffirst-logbook","help\u002F1.getting-started\u002F3.first-logbook",{"title":168,"path":169,"stem":170,"children":171,"page":188},"Features","\u002Fhelp\u002Ffeatures","help\u002F2.features",[172,176,180,184],{"title":173,"path":174,"stem":175},"Log Entries","\u002Fhelp\u002Ffeatures\u002Fentries","help\u002F2.features\u002F1.entries",{"title":177,"path":178,"stem":179},"Search","\u002Fhelp\u002Ffeatures\u002Fsearch","help\u002F2.features\u002F2.search",{"title":181,"path":182,"stem":183},"Tags","\u002Fhelp\u002Ffeatures\u002Ftags","help\u002F2.features\u002F3.tags",{"title":185,"path":186,"stem":187},"Categories","\u002Fhelp\u002Ffeatures\u002Fcategories","help\u002F2.features\u002F4.categories",false,{"title":190,"path":191,"stem":192,"children":193,"page":188},"Account","\u002Fhelp\u002Faccount","help\u002F3.account",[194,198,199],{"title":195,"path":196,"stem":197},"Billing & Subscription","\u002Fhelp\u002Faccount\u002Fbilling","help\u002F3.account\u002F1.billing",{"title":5,"path":143,"stem":145},{"title":200,"path":201,"stem":202},"Exporting Your Data","\u002Fhelp\u002Faccount\u002Fexport","help\u002F3.account\u002F3.export",[204,205],{"title":195,"path":196,"stem":197,"children":-1},{"title":200,"path":201,"stem":202,"children":-1},1794752770718]