How do I know if my account was compromised?

If you've entrusted your user name or password to a third party application, or if your CakeDeliver account is vulnerable due to a weak password or compromised network, your account may be compromised.  If any of these things happen to you, take action as soon as possible:

• If you're unable to log in to CakeDeliver with your CakeDeliver password, or email address (and you know you haven't changed them!)
• If trying the password reset gives you the "We found no your account" message when you enter your email address AND/or user name.

CakeDeliver has added log in limiting, so if someone is trying to use different passwords to get into your account, we disallow access for one hour.  If you've tried logging in with too many incorrect passwords, you'll be locked out.

If you notice weird things and you're still able to log in to your account, immediately do the following:

• Log out of CakeDeliver immediately (this will invalidate the session cookie)
• After you've logged out of CakeDeliver, cleared the cache and exited your browser, open a new browser window and log in to CakeDeliver, and immediately reset your password, or, use the CakeDeliver password reset feature to set a new password before logging in again.
• Clear your browser cache and exit your browser completely (this will ensure that suspicious or unwanted stuff is removed!)

If you're not able to log in to your account, try to reset your password first.  If you still can't get in, contact Support.

Does it always mean that someone hacked my account?

Not always.  Occasionally, a third party application will have a strange bug that causes weird things to happen your account.  If you start seeing strange behavior, changing your password will stop it, as the application will no longer have access to your account until you give it a new password.  Even if your account wasn't hacked, if things are appearing that you didn't put there, it may've been compromised, and it's best to take action as soon as possible.

Account Protection

You can avoid incidents by taking minimal risks with your account.

• Always use Private Browsing on public device.
• When you leave your computer or stop using a third party application, always log out-- especially in a public place!
• Do not select the "remember me" box on someone else's computer, or on your own if many people use it.
• Choose a strong password with numbers, letters, and symbols. Make your password difficult to reduce the chances of being hacked. Change your password occasionally and don't use the same password for everything.