Tembeya Shop
Back to Help Center

Account Security

Password Security

Create a strong password to protect your account:

Password Requirements:

  • Minimum 8 characters
  • At least one uppercase letter (A-Z)
  • At least one lowercase letter (a-z)
  • At least one number (0-9)
  • At least one special character (!@#$%^&*)

Best Practices

  • Use a unique password for Tembeya Shop
  • Don't reuse passwords from other sites
  • Change your password regularly (every 3-6 months)
  • Don't share your password with anyone
  • Use a password manager to store your password securely

Two-Factor Authentication (2FA)

Add an extra layer of security by enabling two-factor authentication:

Available 2FA Methods

  • SMS: Receive a code via text message
  • Email: Receive a code via email
  • Authenticator App: Use Google Authenticator, Authy, or similar apps

To enable 2FA:

  1. Go to Account → Security
  2. Click "Enable Two-Factor Authentication"
  3. Select your preferred method (SMS, Email, or Authenticator)
  4. Follow the setup instructions
  5. Verify your 2FA is working by entering a code

Protecting Your Account

Do

  • Keep your password confidential
  • Enable 2FA for enhanced security
  • Log out from shared devices
  • Use secure networks (avoid public Wi-Fi for sensitive transactions)
  • Keep your email and phone number updated
  • Review your account activity regularly

Don't

  • Share your password or OTP codes
  • Click on suspicious links in emails or messages
  • Provide account details to unsolicited callers
  • Use the same password across multiple sites
  • Ignore security alerts from Tembeya

Recognizing Phishing Attempts

Be aware of phishing scams that try to steal your information:

Warning Signs of Phishing

  • Urgent requests to verify your account
  • Misspellings or grammatical errors in messages
  • Suspicious sender email addresses (not @tembeya.ug)
  • Requests for password, OTP, or personal information
  • Links that don't match official Tembeya URLs
  • Threats of account suspension

If you suspect phishing:

  • Don't click any links or download attachments
  • Don't provide any personal information
  • Forward the message to [email protected]
  • Delete the message immediately

Secure Payment Practices

Protect your financial information when making payments:

  • Only use the official Tembeya Shop website (tembeya.shop or tembeya.ug)
  • Ensure the URL starts with https:// (secure connection)
  • Never share your card details, PIN, or OTP with anyone
  • Use trusted payment methods (mobile money, cards via Flutterwave)
  • Review your bank or mobile money statements regularly
  • Report unauthorized transactions immediately

Data Privacy

How we protect your data:

  • Encryption: All data is encrypted in transit and at rest
  • Secure Storage: Data stored in secure Cloudflare infrastructure
  • PCI DSS Compliance: Payment processing meets industry security standards
  • No Card Storage: We never store your full card details
  • Access Controls: Strict access controls for customer data
  • Regular Audits: Security audits to identify and fix vulnerabilities

For more details, read our Privacy Policy.

If Your Account Is Compromised

If you suspect unauthorized access to your account:

  1. Immediately change your password
  2. Enable or verify two-factor authentication
  3. Review your recent orders and activity
  4. Contact support at [email protected]
  5. Report any unauthorized transactions to your bank or mobile money provider
  6. Check your email for any suspicious password reset requests

Account Activity Monitoring

We monitor your account for suspicious activity:

  • Login from unusual locations or devices
  • Multiple failed login attempts
  • Rapid password change requests
  • Unusual ordering patterns

If we detect suspicious activity, we may:

  • Require additional verification
  • Temporarily lock your account
  • Send you a security alert via email or SMS

Reporting Security Issues

If you discover a security vulnerability or suspect a security breach:

  • Email us immediately at [email protected]
  • Provide details of the issue (what happened, when, how)
  • Include screenshots if applicable
  • Do not exploit the vulnerability or share it publicly
  • We will investigate and respond within 24 hours

Still Need Help?

Concerned about your account security? Our support team is available to help.

Email: [email protected]

Phone: +256 700 000 000

WhatsApp: +256 700 000 000

Support Hours:

Monday - Friday: 8:00 AM - 8:00 PM EAT

Saturday: 9:00 AM - 5:00 PM EAT