Security Settings

Introduction to RadHIL Security

At RadHIL, we take the security of your account and data seriously. Our robust security measures are designed to protect your sensitive information and ensure the integrity of your vacation rental management operations. This guide will walk you through the various security settings and best practices available in your RadHIL account.

Digital lock representing security, blue tones

Password Management

Strong passwords are your first line of defense against unauthorized access. RadHIL implements the following password policies:

  • Minimum 12 characters in length
  • Must include uppercase and lowercase letters, numbers, and special characters
  • Passwords are hashed and salted before storage
  • Automatic password expiration every 90 days
  • Previous passwords cannot be reused

To change your password:

  1. Go to "Account Settings" in your RadHIL dashboard
  2. Click on "Security"
  3. Select "Change Password"
  4. Enter your current password and your new password twice
  5. Click "Update Password"

Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security to your account by requiring a second form of verification in addition to your password. RadHIL supports the following 2FA methods:

  • SMS-based authentication
  • Authenticator app (Google Authenticator, Authy, etc.)
  • Hardware security keys (YubiKey, etc.)

To enable 2FA:

  1. Go to "Account Settings" in your RadHIL dashboard
  2. Click on "Security"
  3. Select "Two-Factor Authentication"
  4. Choose your preferred 2FA method and follow the setup instructions

Access Logs

RadHIL maintains detailed access logs to help you monitor account activity and detect any suspicious behavior. These logs include:

  • Login attempts (successful and failed)
  • IP addresses and locations
  • Device information
  • Actions performed within the account

To view your access logs:

  1. Go to "Account Settings" in your RadHIL dashboard
  2. Click on "Security"
  3. Select "Access Logs"
  4. Use the filters to search for specific activities or time periods

Data Encryption

RadHIL uses industry-standard encryption protocols to protect your data both in transit and at rest:

  • All data transmitted between your browser and our servers is encrypted using TLS 1.3
  • Sensitive data stored in our databases is encrypted using AES-256
  • Encryption keys are managed using a secure key management system

API Security

If you're using RadHIL's API for custom integrations, we provide several security measures to protect your data:

  • API keys with granular permissions
  • OAuth 2.0 for secure authorization
  • Rate limiting to prevent abuse
  • IP whitelisting for API access

To manage your API settings:

  1. Go to "Account Settings" in your RadHIL dashboard
  2. Click on "API & Integrations"
  3. Here you can generate new API keys, set permissions, and configure IP whitelisting

GDPR Compliance

RadHIL is committed to protecting user privacy and complying with the General Data Protection Regulation (GDPR). Our GDPR features include:

  • Data export functionality for user data requests
  • Data deletion tools for right to be forgotten requests
  • Consent management for marketing communications
  • Data processing agreements for our customers

To access GDPR-related tools:

  1. Go to "Account Settings" in your RadHIL dashboard
  2. Click on "Privacy & GDPR"
  3. Here you can manage consent settings and initiate data export or deletion requests

Security Best Practices

In addition to the built-in security features of RadHIL, we recommend the following best practices:

  • Use a unique, strong password for your RadHIL account
  • Enable two-factor authentication
  • Regularly review your access logs for any suspicious activity
  • Keep your recovery email and phone number up to date
  • Be cautious of phishing attempts - RadHIL will never ask for your password via email
  • Use a password manager to generate and store strong passwords
  • Ensure your computer and browser are up to date with the latest security patches
  • Limit API key sharing and regularly rotate your keys