Use a unique password for your Portico Account. Do not reuse the server owner password for a household login or another service.
Enable multi-factor authentication when it is available for the account. Store recovery codes somewhere separate from the device that normally supplies the second factor.
Review signed-in devices and security events after losing a device, changing a password, or seeing an unfamiliar sign-in. Revoke a device that should no longer have access rather than relying only on local app deletion.
Server owners should also review the person’s current server membership and permissions. Account security and server authorization are related but separate controls.