Trust & Safety

Security

Practical guidance to keep your TIM4biz account, your passwords and your call data safe — backed by SSL encryption, two-step authentication and an Australian data centre.

SSL encrypted Two-step authentication Australian data centre
TIM Technologies will never email you asking for your account details. If you receive a suspicious message claiming to be from us, treat it as phishing.
01

Phishing emails

TIM Technologies will never send you an email asking for your details. If you do receive such an email:

02

Password hygiene

  • Don't use a simple password — combine letters, numbers and symbols
  • Don't use the name of a friend, family member, pet, place, product or a dictionary word
  • Don't share your password with other people
  • Don't reuse the same password across multiple sites (e.g. don't use your social network password on your banking site)
  • Don't use your username as part of your password
  • Don't use "password" or scrambled variants such as "P@55w0rd"
  • Do use passphrases — longer, memorable strings of words, e.g. magic blue anvil caticus
  • Do use password managers to generate and store long, unique passwords
  • Do use the latest NIST password recommendations
03

SSL certificate

A Secure Sockets Layer (SSL) certificate protects you in multiple ways:

Encrypts sensitive information

All data transmitted while using the website is encrypted in transit.

Authenticated identity

Contains unique, authenticated information about TIM Technologies.

Verified by a CA

A trusted certificate authority verified our identity before issue.

Visible in the browser

Identified by a URL starting with https:// and a padlock symbol.

04

Spotting fake sites

It is very easy for fraudsters to create a fake web site that looks like an official company site. The purpose of this is to direct users to their fake site, via email or other means, to gather usernames and passwords.

Malicious users can then sign in to your account posing as you and change your system settings and run reports gathering information about your business activities.

05

Two-step authentication

Using a software-based authenticator app, two-step authentication can be enabled on your account. When used, you sign in as usual and are then required to supply the authentication code from your authenticator app.

Using the standard time-based One-time Password Algorithm (TOTP) and HMAC-based One-time Password algorithm (HOTP), the two-step code is compatible with multiple apps that you may already have installed on your phone.

Enable two-step authentication Learn how to add an extra layer of protection to your TIM4biz account.
Two-step authentication →
06

You're on the correct site

Before signing in, always confirm the address bar shows https://tim4biz.com with a padlock. If anything looks unusual — a misspelt domain, missing padlock, or a certificate warning — close the tab and contact us directly.

Report suspicious activity to support@tim4biz.com and our team will investigate promptly.