Maintaining the security and integrity of your passwords is essential for protecting your personal information and safeguarding the sensitive data within Employment Hero. Here are some practical tips to help you keep your passwords secure and respond effectively in case of any compromise.

Choose Strong Passwords

Your password is your first line of defence against unauthorised access. Follow these best practices to create a strong password:

• Use a mix of characters: Include upper and lower case letters, numbers, and special symbols.
• Avoid common words and patterns: Refrain from using easily guessable passwords, such as "password123" or your name followed by numbers.
• Make it long: The longer your password, the harder it is to crack. Aim for at least 12 characters.
• Don’t reuse passwords: Each of your accounts should have a unique password to prevent a breach in one platform from affecting others. 

Keep Your Passwords Safe

Storing your passwords securely is just as important as creating strong ones. Consider the following:

• Use a password manager: A password manager can securely store your passwords, making it easier to use unique, complex passwords for each of your accounts.
• Avoid writing them down: Do not store passwords in easily accessible locations, such as sticky notes on your computer.
• Be cautious with autofill: While autofill features are convenient, they can be risky if someone else gains access to your device.

Protect Against Compromise

If you suspect your password or account has been compromised, take immediate action:

• Reset your password immediately: Use the ‘Forgot Password’ feature to create a new, secure password.
• Monitor your account: Keep an eye on your account activity for any unauthorised access or changes.
• Report the incident: Notify your IT or security teams as soon as possible to investigate and mitigate any potential damage.

Procedures for user registration and deregistration should address situations where user access control is compromised, such as when passwords are inadvertently disclosed. Ensure that your registration data is regularly reviewed, especially in jurisdictions with specific requirements regarding the frequency of checks for unused authentication credentials.

Secure Log-On Procedures

To improve your account security:

• Enable Multi-Factor Authentication (MFA): MFA provides an extra layer of protection by requiring a second form of verification in addition to your password. To read more on how to enable 2FA for the HR platform, read the following article.
• Be mindful of public networks: Avoid logging into your accounts on public Wi-Fi networks. If necessary, use a VPN to secure your connection.
• Log out when done: Always log out of your accounts when you are finished, especially on shared or public devices.

Employment Hero provides secure log-on procedures for cloud service accounts, including those used for accessing sensitive data. These procedures are in place to ensure that your account remains protected at all times. 

What to Do If You Suspect a Compromise

If you receive an alert about unusual login activity or believe your password may have been compromised, follow these steps:

• Change your password immediately.
• Notify your IT support or security team.
• Monitor your account for suspicious activity.

Your security is a top priority, and following these guidelines will help ensure that your accounts remain secure. For more detailed guidance, refer to Employment Hero’s internal resources or contact support.