Skip to main content

Security Best Practices

Follow these guidelines to maximize security.

Account Security

1

Strong Password

  • 12+ characters
  • Mix of letters, numbers, symbols
  • Unique to AgentFlow
  • Use password manager
2

Enable 2FA

  • Use authenticator app
  • Save backup codes
  • Update if device lost
3

Review Sessions

  • Check active sessions regularly
  • Log out unused devices
  • Set session timeout

Team Security

Review permissions quarterly
Remove inactive users promptly
Use principle of least privilege
Audit shared conversations
Monitor unusual activity

Data Security

Best practices:
  • Don’t share sensitive data in prompts unless necessary
  • Review conversation exports before sharing
  • Use private conversations for sensitive topics
  • Delete unnecessary conversations
  • Enable conversation encryption (Enterprise)

API Security

If using APIs:
  • Rotate API keys regularly
  • Use different keys per environment
  • Never commit keys to version control
  • Set IP allowlists (Enterprise)
  • Monitor API usage

Next: Common Issues

Troubleshoot common problems
I