We protect your account on our side: passwords are stored as Argon2id hashes, every request is authorised on the server, and sessions expire. These five habits protect it on yours.
1. Use a long, unique passphrase
Your password must be at least 15 characters. Several unrelated words are easier to remember than a short jumble of symbols and much harder to guess. The “Suggest Passphrase” button on the registration form creates one for you; keep it in a password manager and do not reuse it anywhere else.
2. Treat your Activation Key like a password
An Activation Key lets the desktop app activate without you signing in. It is shown only once, when you create it, so store it in a password manager. If you think someone else has seen it, replace it in the portal: the old key stops working for new activations straight away, and computers that are already activated keep working.
3. Check where you are signed in
Open Security in the Client Portal to see every browser signed in to your account. Sign out any you do not recognise, or sign out everywhere at once.
4. Download only from the Client Portal
Installers are available only to signed-in customers in the portal, and every version lists its SHA-256 checksum. Verify it before you run anything — and never run an installer someone sends you.
5. Know what we will never ask for
- Your password
- Your Activation Key
- Activation codes or authenticator codes
- Password reset or email confirmation links
If you think someone else has signed in
- Reset your password from the sign-in page. Changing it signs you out everywhere.
- Replace your Activation Key in the portal.
- Check your Computers page and deactivate any computer you do not recognise.
- Contact support with your licence reference and what you noticed.