Better Social Docs
Docs menu

Account security

How we protect your account, and how you can protect it too.

We will never ask for your password.

Not for your Better Social account, and not for your TikTok, Instagram or any other social account. We only ever need the public username or link of the account you want to grow.

What we will never ask for

Better Social staff and support, including our virtual assistants, will never ask you for:

  • your Better Social password;
  • passwords for TikTok, Instagram or any other account;
  • two-factor (2FA) codes or recovery codes;
  • your API key.

The only code we ever ask for

Before discussing account details in the live chat on better-social.pro, we may email you a 6-digit code and ask you to type it into that chat. This confirms that you own the account. The code expires after 10 minutes. If you're already signed in on better-social.pro, the chat may recognise you without a code.

Never share that code anywhere else

Type it only into the live chat on better-social.pro itself. Never give it on WhatsApp, Telegram, Discord, email or by phone, and never to a person who contacted you first.

How we store passwords

Passwords are stored only as salted bcrypt hashes. Nobody at Better Social, including staff, can see your password, and we can't tell you what it is. If you forget it, use Forgot password? on the login page to get a reset link by email.

Two-factor authentication (2FA)

2FA is optional but strongly recommended. With it turned on, signing in also needs a 6-digit code from an app on your phone.

  1. Open Settings → Security & Telegram and choose Enable 2FA.
  2. Scan the QR code with any authenticator app (TOTP), for example Google Authenticator, Authy, 1Password or Bitwarden.
  3. Enter the code from the app to confirm.
  4. Save your recovery codes somewhere safe. Each can be used once if you lose your phone.

One account per person

Each person may have one Better Social account. Our system automatically blocks new sign-ups when accounts have already been created from the same device or network.

Why: duplicate accounts are mostly used to abuse the free trial and promotions, and to manipulate the rankings. Blocking them keeps those things available and fair for everyone.

Lost access? Use Forgot password? or contact us. Please don't create a new account.

No account sharing

Accounts are personal. Don't share your login with friends, team members or customers. Resellers should use the API instead.

What happens if an account looks shared

  • If our system detects that an account is used from several different devices and networks in a short time, a typical sign of sharing, the account is automatically locked for 24 hours and placed under review.
  • The owner gets an email explaining what happened and how to contact us on WhatsApp (+33 6 76 86 22 37).
  • The lock ends automatically after 24 hours unless the review finds a problem.
  • If it was only you (a new phone, travelling, a VPN), message us and we can look at it sooner.

Why we do this: someone with your login can spend your balance, see your orders and change your settings. Shared logins are also a common way accounts get taken over. Locking first and reviewing quickly protects your balance and your data.

What we use to protect accounts

For security and fraud prevention only, we use your IP address and approximate country (from our CDN, Cloudflare), a random device ID stored in your browser, and a hash of basic browser characteristics. Staff can see your IP and country history for security reasons, but never your password. Security logs are kept for up to 12 months. Details are in the Privacy policy.

Our official channels

These are the only official ways to talk to Better Social:

Docs are published only at docs.better-social.pro, and the panel only at better-social.pro.

How to spot impersonators

Be suspicious if someone:

  • messages you first, offering "support", cheap deals or a special discount;
  • asks for any password, a 2FA or recovery code, your API key, or the 6-digit chat code;
  • asks you to pay to a wallet address in a private message, or to pay a fee to "unlock" or "verify" anything;
  • asks for ID documents (we never do, see No KYC);
  • sends you to a website that only looks like better-social.pro;
  • pressures you to act fast.

If that happens, don't reply and don't pay. Report it to us through an official channel above.

Checklist: protect your account

  • Use a unique password that you don't use anywhere else.
  • Turn on 2FA.
  • Keep your email account secure. It's how password resets and security alerts reach you.
  • Don't share your login. Keep your API key private and regenerate it if it's exposed.
  • Sign out on shared or public computers.