Settings
Security guidance
Protect workspace access, connected accounts, and automation secrets.
Keep CopyHero workspace access, connected-service authorization, shared links, and webhook secrets limited to the people and systems that need them.
Prerequisites
Review your connected services, shared links, and webhook configurations.
Steps
- Use dedicated, least-privilege accounts for connected services where possible.
- Keep webhook URLs and secret keys out of public documents, logs, and screenshots.
- Revoke shareable links that are no longer needed.
- Regenerate a webhook secret immediately if it may have been exposed.
- Review access with your workspace administrator when someone leaves the team.
Expected result
Only authorized people and systems retain access to your CopyHero resources.
If something goes wrong
Treat a suspected exposed secret as compromised: regenerate or revoke it, update the authorized sender, and review delivery logs. Never paste credentials into an assistant chat or support ticket.