Review sign-in protection
Use a unique password and the available two-factor authentication controls. Keep recovery material private and available to you before changing authentication settings.
- Open Security in Consol and review available sign-in protection.
- Store recovery information outside the project repository and public screenshots.
Manage sessions and tokens
A browser session and a CLI token are different credentials. Removing one should not be assumed to remove the other.
- Review signed-in sessions and end sessions you no longer recognize or use.
- Revoke unused or exposed CLI tokens, then create a replacement only when needed.
Respond to suspected exposure
Stop sharing the credential, revoke the affected access and inspect recent project activity. Support can investigate using a project/time reference without receiving your password.
- Revoke the affected session or token through account controls.
- Send support the approximate time and affected project with secrets removed.