Find Your Perfect Companion

Every dog deserves a loving home. Every person who wants to help deserves a system that works.

Help CenterTerms of ServicePrivacy PolicyAcceptable Use Policy

© 2026 Lilly Bean Collective. All rights reserved.

Inspired by one rescue — empowering thousands more.

Help Center
      • •Browsing Pets Overview
      • •Pet Detail Page Walkthrough
      • •Cross-Organization Pet Search
      • •How to Apply to Adopt a Pet
      • •Checking Your Application Status
      • •Post-Adoption Resources
      • •Managing Your Favorites
      • •Notification Types
      • •Managing Notifications
      • •Search on LBC
      • •Creating an Account
      • •Logging In
      • •Two-Factor Authentication (2FA)
      • •Account Security Best Practices
      • •Managing Your Profile
      • •Notification Preferences
      • •Success Stories Overview
      • •Submitting a Success Story
      • •Common Issues and Troubleshooting
      • •Platform Reliability and Best Practices
Help Center/Account & Authentication/Account Security Best Practices

Account Security Best Practices

Keeping your LBC account secure protects your personal information, your adoption applications, and, for organization staff, sensitive pet data. This guide covers the most important security measures you can take.

Use a Strong Password

Your password is the first line of defense. A strong password:

  • Is at least 12 characters long (longer is better)
  • Uses a mix of uppercase, lowercase, numbers, and symbols
  • Is unique — never reuse passwords across different websites
  • Is not guessable — avoid names, birthdays, common words, or keyboard patterns

Password Tips

  • Use a passphrase instead of a single word (e.g., "PurpleElephantDancesAt3am!" is stronger than "P@ssw0rd123")
  • Consider a password manager (Bitwarden, 1Password, or Apple/Google built-in managers)
  • Change your password immediately if you suspect it's been compromised
  • Never share your password with anyone — LBC staff will never ask for it

Password Manager Recommendations

Password managers generate, store, and auto-fill strong passwords. They're the single best way to maintain unique, strong passwords across all your accounts:

  • Bitwarden — Free, open-source, cross-platform
  • 1Password — Paid, excellent family sharing features
  • Apple Keychain — Built into Apple devices
  • Google Password Manager — Built into Chrome and Android
  • KeePassXC — Free, offline, open-source

Enable Two-Factor Authentication

2FA is the single most effective security measure you can enable. It prevents unauthorized access even if your password is stolen.

We strongly recommend enabling 2FA for all accounts, and it's required for organization staff accounts with administrative privileges.

See for setup instructions.

Two-Factor Authentication (2FA)

Recognizing Phishing Attempts

Phishing is the most common way accounts get compromised. Be cautious of:

Suspicious Emails

  • Unexpected requests — Emails asking you to "verify your account" or "confirm your password"
  • Urgent language — "Your account will be suspended!" or "Immediate action required!"
  • Generic greetings — "Dear user" instead of your name
  • Mismatched links — Hover over links before clicking; they should lead to lbc.app or *.lbc.app
  • Attachments — LBC never sends attachments via email

How to Verify an Email

Check the sender's email address carefully:

  • Legitimate LBC emails come from noreply@lbc.app or notifications@lbc.app
  • Be suspicious of lookalike domains like lbc-security.com or lbcsupport.net

What LBC Will Never Do

  • Ask for your password via email, phone, or message
  • Send links asking you to "verify" your account by entering credentials
  • Request payment through unsolicited emails
  • Ask for your 2FA codes outside the login process

Session Management

Keep your sessions under control:

  1. Log out from shared devices — Always log out when using public or shared computers
  2. Review active sessions — Check Settings > Security > Active Sessions periodically
  3. Revoke unknown sessions — If you see a session you don't recognize, revoke it immediately
  4. Use private browsing — Consider incognito/private mode on shared devices
  5. Remember Me — Only use on personal, trusted devices

Reporting Suspicious Activity

If you notice anything unusual about your account:

Signs of Compromise

  • Unexpected password reset emails
  • Unknown login locations in your session list
  • Pets saved or applications submitted that you didn't make
  • Changes to your profile information
  • 2FA being disabled without your action

How to Report

  1. Change your password immediately
  2. Review and revoke all active sessions
  3. Check your 2FA settings — re-enable if disabled
  4. Contact LBC support at support@lbc.app with details of the suspicious activity
  5. Monitor your account for further unusual activity

Account Recovery

If you're locked out of your account:

  • Forgot password — Use the password reset flow at /login
  • Lost 2FA access — Use backup codes or contact support
  • Disabled account — Contact support for reinstatement

For security reasons, account recovery requests may take 1-3 business days to process while we verify your identity.

Additional Tips

  • Keep your email secure — Your LBC account is only as secure as your email account. Enable 2FA on your email provider too.
  • Update your browser — Modern browsers include security updates that protect against known vulnerabilities
  • Avoid public Wi-Fi for sensitive actions — Use a VPN if you must use public networks
  • Regular security checkup — Review your account settings monthly

Was this article helpful?

Still stuck?

Contact our support team·Back to Account & Authentication