Security & Account Controls

Reflects doc items: password reset approval, 2FA adoption, location-based security and transaction passwords.

Security overview

High-level KPIs

2FA enabled accounts

3,240

62% of active users

Pending password resets

24

Require admin approval

Restricted locations alerts

7

Manual review required

Policies

As detailed in doc security section

  • Password resets require verification via email + phone (ROOT user only for main accounts).
  • Transaction passwords mandatory for wallet withdrawals above 500 SG.
  • Location-based security alerts owners if representative logs in from untrusted country.

Pending security requests

Password & transaction password resets

SEC-4001

TalentMatch HR (Owner) · Password reset

Awaiting verification

Lost device

SEC-4002

Squad Courier #118 · Transaction password reset

Ready to approve

Forgot code

Trusted devices & location alerts

Doc mentions location-based security for owner/representative accounts.

Trusted devices

  • John Doe

    MacOS - Chrome

    San Francisco, USA

  • Samantha Lee

    Windows - Edge

    Melbourne, AU

Location-based alerts

  • Representative login from new country (auto-email to owner + admin).
  • Multiple failed transaction password attempts triggers account lock.
  • Wallet withdrawals flagged if IP mismatch from last verified login.

2FA & notification settings

Admin controls for security comms.

2FA enrollment

Owners must enroll in 2FA before approving new representatives. Representatives prompted but optional per doc.

Security notifications

Email + push alerts for password resets, transaction password changes and location alerts. Logs retained 12 months.