---
title: Account Security
description: Manage passwords, active browser sessions, and security settings.
---

Zorveus protects accounts with secure hashed credentials, HTTP-only secure session cookies, and active session invalidation.

---

## Best Practices

- Enable multi-factor authentication where supported.
- Rotate service keys and API keys periodically.
- Invalidate stale dashboard browser sessions from **Settings** -> **Security**.