Protecting your account if you receive a notification about a connection on a new device that you don't recognize
When your Zeffy Account is accessed from a new device, you may receive a "Connection from a new device" notification sent to your email. Below is a list of steps we recommend taking to review the email and protect your account.
Identifying if the activity was you:
The email in question will contain additional information to help you identify whether or not the login was yours. Please take note of the following information:
- The login date and time mentioned in the email is in UTC time-zone. Please make sure to convert it into your local time to identify if it corresponds to any of your recent logins.
- The location mentioned is approximate meaning it may mention a town or city close to the one you are located in rather than your exact location.
- Using a VPN will result in the location being differently identified by our system.
- Any recent browser or device updates can result in your device being identified as a "new" device, even if you had logged in on it previously.
If the activity was you:
If you recognize the login based on the information that was provided, no additional action is required on your end.
If the activity wasn't you:
If you don't recognize the login and device, please make sure to follow the following steps to protect your account and data.
1️⃣ Update your Password
- Log in to your account and click on your name in the top left to navigate to your account settings.
- In your account settings click on "change password" to update your password.
- Please ensure to follow password best practices to ensure that your new password is a strong one.
2️⃣ Verify your account information
- Verify your emails to see if you received any notifications about a change being made to your account.
- If any changes were made to your user access, account owner information, or bank account details, you will have received a separate notification.
- You can also verify the information in Zeffy. Common tabs to check for changes are the following:
- Bank - make sure the last 4 digits are the same as the ones you entered
- Users - make sure you recognize all the emails listed on the account under "Settings" > "User management"
3️⃣ Update your user information
- A common reason for new device logins being detected is when login information is being shared amount different members of your organization use the same login information.
- To keep your account secure, make sure that each of your members has their own user access to your Zeffy account: Adding users to your account
4️⃣ Enable 2FA (two-factor authentication)
- For an added layer of protection, we also recommend activating two-factor authentication. Using a second step to sign makes your Zeffy account much more secure.
- 2FA can be enabled by following the instructions here: Activating 2FA