How NextStamp keeps accounts secure

Your NextStamp account opens your business, your team and your customers’ details, so it’s protected at every step. This article explains how, and what you can do to keep it that way.

Passwords

• A password must be 12 to 128 characters. A few unrelated words make a strong one that’s easy to remember.
• NextStamp stores passwords only as a salted hash, never the password itself, so nobody at NextStamp can read yours.
• Repeated wrong attempts are slowed down: after a handful in a minute, the form says “Too many attempts. Wait a minute, then try again.”

NextStamp can’t yet email you a link to reset a forgotten password, or confirm email addresses. Keep your password in a password manager. Signing in, passwords and Google explains what to do if you forget it.

Continue with Google

If you sign in with Google, NextStamp keeps your Google account’s name, email and identifier, stores the tokens Google returns encrypted, and doesn’t keep your profile photo. Google always asks which account to use, which matters on a shared phone. A Google sign-in never joins onto an existing email-and-password account, so nobody can take over an account by creating a Google account with the same address.

Sessions and signing out

• Sign out in Settings, under Account, ends the session on that device.
• Changing your password signs out every other device signed in to your account.
• Every screen checks your session as it loads. When a session ends elsewhere, the app says you’ve been signed out and takes you to sign in again.

If you think someone else is using your account, change your password, then email support@nextstamp.app from your account’s address. NextStamp support can sign an account out on every device at once.

Who can see what

Every screen and action checks, on NextStamp’s servers, that you belong to the business, that your role allows it and that you work at that outlet. Hiding a button is never the only protection. Roles: owner, admin, manager and staff sets out the rules.

Invitations

An invitation link works once, for 7 days, and only for the email address it was made for. NextStamp keeps only a scrambled form of the link, so it can’t be read back from our records, and the Team screen shows it once, when you create it. Revoke any invitation you no longer need. See invite your team.

NextStamp’s own staff

NextStamp’s support team can look up an account only by its exact email address, and sees counts, not customers’ cards. Every look at an account, and every change support makes, is recorded in an audit log. Changes to a business are also recorded in that business’s own history, with the reason.

Cookies and tracking

The apps set only the cookies signing in needs. There are no advertising or tracking cookies. Page views on NextStamp’s public pages are counted without cookies.

Good habits

• Use a password you use nowhere else.
• Give each person on your team their own account, with the lowest role that does their job.
• Remove people from the team on their last day.
• Sign out of shared devices at the end of a shift. See shared till phones and tablets.
• Never send a password by email, to NextStamp or anyone else. Support will never ask for it.