Security guidance

Account security

Simple practices that protect your IOLResearch account.

Use only official messages

Open links only from the official IOLResearch email domain configured in Supabase SMTP settings.

Never share credentials

IOLResearch support will never ask you to send your password, recovery token, or complete authentication link.

Use the newest email

Invitation and recovery links are time-limited and may be single-use. Older emails can stop working after a new request.

Report unexpected changes

If you receive a password-changed or email-changed notification you did not expect, request password recovery and contact support immediately.