Skip to main content

How Does Brandmentions Protect My Credentials and Tokens?

Updated over a month ago

Your credentials (for example your password) and your tokens (for example your API key and session tokens) are the keys to your BrandMentions account. Protecting this sensitive information is a top priority for us.

How we protect your credentials and tokens

Here are some of the key security measures we have in place:

Security measure

Description

Password hashing

We never store your password in plain text. Instead, we use a strong one way hashing algorithm (such as bcrypt) to convert your password into a unique and irreversible string of characters. When you log in, the password you enter is hashed and compared with the hashed password stored in our database. Even if our database were compromised, the original password would remain protected.

Secure token management

Your API key and session tokens receive the same level of protection as your password. They are stored in a secure, encrypted format and are always transmitted over an encrypted HTTPS connection. We also use monitoring and safeguards to detect and prevent unauthorized or suspicious token use.

Transport Layer Security (TLS)

All communication between your browser and the BrandMentions platform is encrypted using Transport Layer Security (TLS). This protects your credentials, tokens, and other sensitive information from being intercepted while they travel over the internet.

Regular security audits

We regularly perform internal and external security reviews to identify potential risks and keep our systems aligned with current best practices. When issues are discovered, we investigate and address them as quickly as possible.

Your role in protecting your credentials and tokens

Security works best when we work together. Here are some simple ways you can help keep your BrandMentions account secure:
​

  • Use a strong, unique password that you do not reuse on other sites.

  • Never share your password or your API key with anyone, including people who claim to be from support.

  • Store your API key in a safe place, such as a secure password manager.

  • Be cautious with emails or messages that ask you to log in or provide your credentials, especially if they contain unexpected links or attachments.

  • Log out of your BrandMentions account when you are finished, especially on shared or public devices.

By combining BrandMentions security measures with your own good security habits, you help ensure that your credentials and tokens remain safe and your account stays protected.

Did this answer your question?