Protect your sign-in
Use a unique work password, never share it, and approve an MFA prompt only when you initiated the sign-in.
If you receive an MFA request you did not start, do not approve it. Use Northstar's confirmed security reporting route. Do not share passwords, one-time codes, or recovery codes with anyone who asks by message, phone, or in person.
Follow Northstar's approved sign-in requirements. This sample does not establish which MFA methods are required or whether a password manager is provided.
Habits that help
Keep work credentials separate
Use a password that is not reused on personal or other work accounts. Keep it private, including from coworkers and people claiming to provide support.
- Do not write a password where another person can see it.
- Use only a password manager explicitly approved and provided by Northstar.
Check every unexpected prompt
An MFA prompt you did not initiate may indicate someone is trying to access your account. Do not approve it or share a code.
- Stop and use the confirmed security reporting route.
- If you are unsure whether a sign-in is yours, do not approve the prompt while you verify.
Check Training for assigned learning
The Training app is the destination for assigned password and MFA learning.
Open Training and check your assigned courses.
Use the course's stated instructions and due date if a course is assigned.
If Northstar has not confirmed a password-manager option, do not store work credentials in an unapproved tool.