Account Security

Keeping your UrlHub account secure protects your links, analytics data, and personal information.

Strong Password

• Use a password that is at least 6 characters long.
• Combine uppercase letters, lowercase letters, numbers, and special characters.
• Do not reuse passwords from other services.
• Change your password regularly from the Account settings page.

Google Sign-In

If you signed up with Google, your authentication is handled by Google's secure OAuth system. You do not need to manage a separate password for UrlHub. Keep your Google account secure with a strong password and two-factor authentication.

Session Management

UrlHub allows you to view and manage your active sessions:

1. Go to Sessions in the sidebar.
2. View all devices and browsers where you are logged in.
3. Revoke any session you do not recognize or no longer use.

If you notice unfamiliar sessions, revoke them immediately and change your password.

Email Verification

New accounts require email verification before they can be used. This ensures that only the email owner can create an account with that address.

Data Protection

• Your password is stored using bcrypt hashing — we never store plain-text passwords.
• Payment data is processed by Razorpay and is never stored on our servers.
• Session tokens are encrypted and have automatic expiration.

Suspicious Activity

If you suspect unauthorized access to your account:

1. Change your password immediately.
2. Revoke all active sessions.
3. Contact us through the contact page.