Origin and account security
Prepare safely and understand account boundaries.
Pre-launch workspace. Live traffic protection is not active.
Origin access#
Keep current working DNS until a verified ingress address is assigned. Do not point a domain at an invented PacketShield endpoint.
After activation, restrict the origin to approved upstream sources using provider-specific instructions. Preserve required administration access and test both editions before enforcing firewall changes.
Account safety#
- Secure your Google account and sign out on shared devices.
- Never post passwords, cookies, private keys or OAuth secrets in support messages.
- Administrator access depends on approved Google identities, not display names.
- Customer APIs only return and delete drafts belonging to the signed-in account.
- The current product has no API-key or delegated team-account system.
Administrator inspection#
Approved administrators can inspect a customer's saved networks without receiving that person's password or becoming their login session. The inspection view identifies the customer and is read-only. Editing is handled separately through the audited admin configuration editor.