Protect your account and recognize suspicious messages
Recognize sign-in and download scams, protect shared devices, and respond to suspected account misuse.
Use the official entry points
Start from www.altifigence.com, then follow its links to Auth, Account, Cloud, support or downloads. Check the hostname carefully; similar spelling, an unexpected subdomain, or an urgent message can signal impersonation. Do not treat a sender's display name or a padlock as proof.
Use a unique password and the additional verification methods offered in your account settings. Keep recovery material somewhere other people using the device cannot access. Before removing a sign-in method, confirm that another working method remains available.
Recognize social engineering
Be suspicious of requests to send a one-time code, approve an unexpected sign-in prompt, install a remote-control tool, or run a command pasted into a support message. Verify an unexpected request through the official support page you opened yourself.
A product screenshot is not an installer. Obtain applications through the official Downloads page and inspect the release and platform information shown there. Do not run a package just because it arrived in a chat, email, public issue or unofficial mirror.
Use shared devices carefully
Lock the screen when leaving the device, keep the browser and operating system updated, and avoid saving credentials on a machine you do not control. At the end of the session, sign out and remove your account from the Auth chooser. Closing a browser window is not a reliable sign-out procedure.
Do not put access tokens, private source code, keys, recovery codes or customer information into public Community posts or screenshots. Check the content of log bundles before sharing them.
If you suspect misuse
Stop interacting with the suspicious page. Open the official Account page independently and use the available security controls. Contact security@altifigence.com with a brief timeline, the suspicious hostname and redacted evidence. Never forward working credentials or session links. Preserve relevant evidence rather than repeatedly retrying an unknown installer.