> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rugpullbot.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Account security settings and best practices

# Security

Protect your RugPullBot account with two-factor authentication, trusted devices, and security best practices.

## Two-Factor Authentication (2FA)

Add an extra layer of security to your account with TOTP-based 2FA.

### Enabling 2FA

<Steps>
  <Step title="Open Profile">
    Go to your Profile page and find the Two-Factor Authentication section.
  </Step>

  <Step title="Click Enable">
    Click "Enable Two-Factor Authentication" to generate a QR code.
  </Step>

  <Step title="Scan QR Code">
    Use an authenticator app to scan the QR code, or manually enter the secret key.
  </Step>

  <Step title="Enter Verification Code">
    Enter the 6-digit code from your authenticator app to confirm setup.
  </Step>

  <Step title="Save Recovery Codes">
    Download or email your recovery codes and store them securely.
  </Step>
</Steps>

### Supported Apps

* Google Authenticator
* Authy
* Microsoft Authenticator
* 1Password
* Any TOTP-compatible app

### 2FA on Sign-In

When 2FA is enabled, you'll need to enter a 6-digit code after your password. You can also use a recovery code if you don't have access to your authenticator app.

### Recovery Codes

During 2FA setup, you receive 8-10 single-use recovery codes in the format `XXXX-XXXX`. These are your backup if you lose access to your authenticator app.

<Warning>
  Store your recovery codes in a safe place. Each code can only be used once. Without them, account recovery requires manual support verification.
</Warning>

You can:

* **Download** recovery codes as a `.txt` file
* **Email** recovery codes to your verified email address
* **View** remaining codes in your profile settings

### Disabling 2FA

To disable 2FA:

1. Go to Profile > Two-Factor Authentication
2. Click "Disable 2FA"
3. Enter your current password
4. Enter a 2FA code or recovery code to confirm

### 2FA Warning Banner

If 2FA is not enabled, you'll see a warning banner reminding you to secure your account.

## Trusted Devices

After verifying 2FA on a device, you can choose to **trust it for 7 days**. Trusted devices skip the 2FA prompt on subsequent sign-ins.

### Managing Trusted Devices

View and manage your trusted devices in the profile:

| Info             | Description                      |
| ---------------- | -------------------------------- |
| Browser          | Browser name and version         |
| Operating System | Device OS                        |
| IP Address       | IP used during verification      |
| Last Used        | When the device was last active  |
| Expires          | When the 7-day trust period ends |

You can:

* **Revoke** individual devices
* **Revoke All** trusted devices at once

<Tip>
  Revoke all trusted devices immediately if you suspect unauthorized access to your account.
</Tip>

## Password Security

### Strong Password Tips

* Use at least 12 characters
* Mix uppercase and lowercase letters
* Include numbers and symbols
* Avoid common words or patterns
* Don't reuse passwords from other sites

### Changing Your Password

1. Go to Profile > Password section
2. Enter current password
3. Create new strong password
4. Confirm new password

## Security Best Practices

<AccordionGroup>
  <Accordion title="Enable 2FA">
    Two-factor authentication significantly reduces the risk of account compromise.
  </Accordion>

  <Accordion title="Use Unique Passwords">
    Never reuse your RugPullBot password on other sites.
  </Accordion>

  <Accordion title="Link Multiple Sign-In Methods">
    Connect at least two sign-in methods (e.g., email + Google) so you're never locked out.
  </Accordion>

  <Accordion title="Verify URLs">
    Always check you're on rugpullbot.com before entering credentials.
  </Accordion>

  <Accordion title="Secure Your Email">
    Your email is used for recovery — keep it protected with its own 2FA.
  </Accordion>

  <Accordion title="Monitor Trusted Devices">
    Regularly review your trusted devices and revoke any you don't recognize.
  </Accordion>
</AccordionGroup>

## Anti-MEV & Anti-Sniper

Built-in trading security features:

### Anti-MEV Protection

Protects transactions from sandwich attacks by routing through secure channels.

### Anti-Sniper Mode

Prevents known sniper bots from front-running your token launch.

<Note>
  These features are enabled by default and highly recommended to keep on.
</Note>

## Reporting Security Issues

If you discover a security vulnerability:

1. **Do not** publicly disclose the issue
2. Contact support via Telegram
3. Provide detailed information
4. Allow time for investigation

<Tip>
  Responsible disclosure of security issues is appreciated and may be rewarded.
</Tip>

## Account Recovery

### Lost Password

1. Click "Forgot Password" on the sign-in page
2. Enter your email address
3. Check email for a reset link
4. Create a new password

### Lost 2FA Access

1. Use one of your recovery codes on the sign-in screen
2. If no recovery codes remain, contact support via Telegram
3. Verify your identity through the support process

### SSO Recovery

If you signed up via SSO and can't access that provider:

1. Sign in with any other linked provider
2. Or use your email + password if one is set
3. Contact support if all sign-in methods are unavailable

<Warning>
  Store your 2FA backup codes securely. Without them, account recovery requires manual verification.
</Warning>