Protecting client data is always a priority for our team, but it's a problem we can't solve by ourselves.
Here are some things you can do to make sure that your account isn't compromised:
Since the software development team is fairly autonomous, other parts of the HBK Engineering organization - such Human Resources, or IT — will never ask for your password, nor will they send you to a page asking you to sign in to your account by redirecting you to “auth.hbkapps.com” or similar pages for any reason. Please alert us immediately if someone asks.
When logging into HBK Where or other tools built by our team (HBK Apps), always ensure the address bar says “https://auth.hbkapps.com” and that the certificate is valid (indicated by the green lock)
Always use a complex, hard-to-guess password. Always memorize or securely store your password and never use the same password you use to login to other services (for instance, Outlook or ADP.) If your password isn't secure enough, you can learn how to change it here.
Email from our team will always come from the “@hbkengineering.com” or “@hbkapps.com” domains. If you see mail that comes from a different domain, it’s not us.
That's Us!
Never send your password over email. In fact, it’s generally a good idea to never tell anyone, even us, your password, ever. While it might seem to be useful to help troubleshoot your account, it’s really important that you never disclose your password to anyone, even our team. A better strategy would be to screen-share with us over Skype.