Account Security Best Practices

Phishing is the most common way accounts get compromised. Be cautious of:

Suspicious Emails

• Unexpected requests — Emails asking you to "verify your account" or "confirm your password"
• Urgent language — "Your account will be suspended!" or "Immediate action required!"
• Generic greetings — "Dear user" instead of your name
• Mismatched links — Hover over links before clicking; they should lead to lbc.io or *.lbc.io
• Attachments — LBC never sends attachments via email

How to Verify an Email

Check the sender's email address carefully:

• Legitimate LBC emails come from woof@lillybeancollective.io
• Be suspicious of lookalike domains like lbc-security.com or lbcsupport.net

What LBC Will Never Do

• Ask for your password via email, phone, or message
• Send links asking you to "verify" your account by entering credentials
• Request payment through unsolicited emails
• Ask for your 2FA codes outside the login process

Session Management

Keep your sessions under control:

1. Log out from shared devices — Always log out when using public or shared computers
2. Review active sessions — Check Settings > Security > Active Sessions periodically
3. Revoke unknown sessions — If you see a session you don't recognize, revoke it immediately
4. Use private browsing — Consider incognito/private mode on shared devices
5. Remember Me — Only use on personal, trusted devices

Reporting Suspicious Activity

If you notice anything unusual about your account:

Signs of Compromise

• Unexpected password reset emails
• Unknown login locations in your session list
• Pets saved or applications submitted that you didn't make
• Changes to your profile information
• 2FA being disabled without your action

How to Report

1. Change your password immediately
2. Review and revoke all active sessions
3. Check your 2FA settings — re-enable if disabled
4. Contact LBC support at support@lbc.io with details of the suspicious activity
5. Monitor your account for further unusual activity

Account Recovery

If you're locked out of your account:

• Forgot password — Use the password reset flow at /login
• Lost 2FA access — Use backup codes or contact support
• Disabled account — Contact support for reinstatement

For security reasons, account recovery requests may take 1-3 business days to process while we verify your identity.

Additional Tips

• Keep your email secure — Your LBC account is only as secure as your email account. Enable 2FA on your email provider too.
• Update your browser — Modern browsers include security updates that protect against known vulnerabilities
• Avoid public Wi-Fi for sensitive actions — Use a VPN if you must use public networks
• Regular security checkup — Review your account settings monthly