Protect your access. Work with confidence.
What you need to protect your account, team and customer information.
Use your authenticator
When creating a new account, set up your authenticator using the code shown by Atlas and verify the temporary code. Store your recovery codes privately: they are shown once and each works once. Do not share them with your team.
Review your account and sessions
- Open Settings → Your account security → Manage security.
- Review password and authenticator settings.
- Check the active-session count. To close all sign-ins, ask the authorized team for help.
- Use a separate account for everyone on your team.
Give people the access they need
| Role | Recommended use |
|---|---|
| Read only | Review information without making operational changes. |
| Operations | Manage permitted day-to-day tasks. |
| Administrator | Configure the organization and manage permitted access. |
The invitee must have an approved account. Invitations preserve their own password and authenticator. Revoke invitations you no longer need.
Protect your connections
Enter Stripe, email or Telegram keys only in Atlas configuration fields. Do not include them in images, HTML blocks, shop names or support conversations. If a key may have been exposed, revoke or replace it at the provider and update the Atlas connection.
Handle pending payments carefully
If a page is slow or the connection drops, open Orders & payments and review the status. Do not repeat a processing payment without checking it. Use detail actions to refund or manage a payment and review the amount before confirming.
If you lose access or notice something unusual
Use a recovery code if you lost your authenticator. If you cannot sign in, contact the Atlas team through the channel used to approve your account. Share your username and what happened; never send your password, recovery codes or full keys.