Security
Protect API credentials, wallets, personal information, and private work content.
Protect credentials
Never share:
- an API Key or Access Token;
- a password;
- a private key, wallet Secret, or recovery information;
- another authentication credential.
Store production Secrets in a server-side secrets manager or protected environment variable. Do not place them in browser code, source control, screenshots, chat, or shared documents.
If an API Key might be exposed, create a replacement, update and verify the integration, and then revoke the old Key.
Protect personal and account information
Submit sensitive personal information only on the product page that explicitly requests it. Do not put identity documents, selfies, complete wallet information, private Campaign data, or Submission content in ordinary chat or shared documents.
When contacting support, provide only the information needed to identify and investigate the issue. Never provide a password, API Secret, private key, or wallet recovery phrase.
Verify on-chain actions
Before withdrawing, verify the complete amount, network, and signing wallet, and confirm that the wallet is linked to the current account. An on-chain signature and claim cannot be reversed.
Report a problem
Use Report Bug or the support entry provided by the Portal. For account support, contact hello@humanbased.ai.