Password & Account Security — Best Practices

This public page explains account security. Password changes, password recovery and real security settings are handled only after login on the secure RFTUK Members server.

RIGHT FIRST TIME UK  •  MEMBERS

Secure Password & Account Security

This public page explains account security. Password changes, password recovery and real security settings are handled only after login on the secure RFTUK Members server.

Account View Securely
Password View Securely
Security View Securely
Two-Step Login COMING SOON

Change Your Password

Choose a strong password that you do not use for another website or service.

Update Password

All fields are required.

Secure password management
Password changes are completed only after secure member login
The server checks the member session and CSRF protection
New passwords are securely hashed by the server
Your password is never placed into this public webpage
Open Secure Password & Security Settings →

Security Check

✓
Account Active Your membership account is active.
🔒
Secure Login Your password should never be publicly displayed.
📧
Recovery Email Your registered email can be used for account recovery.
🛡️
Session Protection Secure sessions should protect signed-in member pages.

Forgotten Your Password?

If you cannot remember your password, use the secure password-recovery process rather than creating another membership.

Start Password Recovery →

Two-Step Verification

An additional security step can later be added so signing in requires more than just your password. This could provide stronger protection for member accounts.

PLANNED FEATURE

Recent Account Activity

The secure Members server can show recent security activity connected with your account.

Date
Activity
Device
Status
Secure Members Area
Security activity
Shown after login
Private

Open the secure Password & Security page to view any account-security information available to your member account.

Signed-In Devices

Review sessions connected to your member account.

CURRENT SESSION

This Device

This represents the browser or device you are currently using to access your member account.

SECURITY OPTION

Other Sessions

If you believe another device may still be signed into your account, you should be able to end other sessions.

Open Security Settings →

Protect Your Account

A few simple steps can significantly improve the security of your membership account.

🔑

Unique Password

Do not use the same password for your RFTUK account and your email or banking accounts.

👁️

Watch for Fake Messages

Be cautious of unexpected messages asking you to sign in or provide account information.

🚫

Never Share Passwords

RFTUK should never ask you to send your password by email, message or ordinary form.

📱

Sign Out When Needed

Sign out after using a shared or public computer or device.

Never Send Us Your Password

Right First Time UK administrators, Directors, campaign leaders and volunteers should never need to know your actual password.

Do not send your password, banking password, PIN, full payment-card number or card security code through email, member submissions, support messages or evidence forms.

If you receive a suspicious message claiming to be from Right First Time UK and asking for security information, do not provide it. Use the official Membership Support page instead.

Report an Account Concern →

How the Finished Security System Should Work

✓
Passwords Are Hashed Passwords should be securely hashed by the server, not stored as readable text.
✓
Secure Sessions Members should only reach private pages after a valid authenticated session.
✓
Login Protection Repeated failed login attempts should be rate-limited and monitored.
✓
Password Reset Protection Password-reset links should use unique, single-use tokens that expire.
✓
Security Logs Important security events can be logged without recording the member's actual password.
Information review Pending factual review
This page provides general information and signposting. Check the linked official source for the latest rules, deadlines and service details.