Account Security — Keeping Your Account Safe

Your SipReward account security is our top priority. This article explains the protections we have in place and the steps you can take to keep your account safe.

How SipReward Protects Your Account

• Encrypted passwords: Your password is never stored in plain text. We use industry-standard one-way hashing.
• Secure authentication: All sign-in requests are transmitted over encrypted (HTTPS) connections.
• Session management: Your session automatically expires after a period of inactivity to prevent unauthorized access on shared devices.
• Role-based access: Store staff only see the data and tools their role requires — cashiers cannot access billing, and managers cannot delete the store account.

What You Can Do

Use a Strong, Unique Password

Choose a password that is at least 12 characters long and includes a mix of uppercase letters, lowercase letters, numbers, and symbols. Do not reuse passwords from other websites.

Sign Out on Shared Devices

If you sign in on a shared or public computer, always sign out when you are done. Click your profile icon and select Sign Out.

Keep Your Email Secure

Your email is the key to your account. If someone gains access to your email, they can reset your password. Use a strong password on your email account and enable two-factor authentication if your email provider offers it.

Review Active Sessions

If you suspect someone else has accessed your account, change your password immediately and sign out of all devices by signing out and signing back in.

Reporting a Security Concern

If you notice suspicious activity on your account or believe your account has been compromised:

1. Change your password immediately from your Profile page.
2. Contact Support with a description of the issue.

We take all security reports seriously and will investigate promptly.

Related Articles

• Privacy Overview
• Managing Your Privacy Settings