Your photography experience should feel personal, straightforward, and secure. Whether you are booking a session, viewing your gallery, or joining a conversation on our news website, protecting your account is part of that experience.
Our recent security updates bring several protections together across EVERPEAK Visuals. Here is what those protections do, what you may notice when using your account, and what to do if something does not look right.
More protection when you sign in
Account verification helps us check that the person requesting access controls the verification method attached to that account. Clients can enable an email verification requirement when signing in. Staff access uses authenticator verification, while guest readers confirm their email address before their new account becomes active.
Email sign-in codes have a limited lifetime and are intended for a single use. Verification attempts are limited, and repeated sign-in requests are subject to request limits. These controls help reduce repeated guessing and misuse of the sign-in process.
Protecting the email account connected to EVERPEAK is important, too. Someone who controls that inbox may be able to receive account recovery messages. Use the security options offered by your email provider as well as the options in your EVERPEAK account.
Better control over signed-in devices
A session is the connection that keeps an account signed in after login. Knowing your password is only part of account security; being able to end an unwanted session matters as well.
EVERPEAK provides account session controls so you can review signed-in sessions and end access you no longer want to keep. Use those controls after using a shared device, losing a device, or noticing activity you do not recognize. Check the available session actions in your account's security settings, and contact support if you need help ending access.
News sign-in for an existing client or staff account is also tied to the underlying account session. If that source session is revoked or expires, it no longer provides valid access to the news account. Guest password recovery ends existing guest sessions so an old guest session cannot simply continue after the reset.
Separate access for separate purposes
Using one sign-in experience does not give every account the same permissions. A guest reader account is for participating in the news community; it does not create a client account or grant access to private galleries, bookings, or business administration.
Client and staff access remain separated, and protected account actions are checked on the server. Passwords are stored as salted password hashes rather than readable passwords. Session cookies use browser protections that help keep them out of ordinary page scripts.
These protections work together. An account's permissions, its current session, and the verification needed for an action all matter when deciding whether access should be allowed.
A safer place to join the conversation
Reading public news does not require an account. Posting comments, replying, liking an article, or using its share action requires a guest, client, or staff account.
New guest accounts require email confirmation. Guest names are checked for inappropriate language and obvious impersonation, including names that suggest an official support or administrative identity. Those checks are a safeguard, not proof that every reader is who they claim to be.
Comments are text only and limited to 300 words. Readers can report a comment, and authorized moderators can hide inappropriate content. Never put passwords, verification codes, payment details, or private account information in a public comment. Use support for account-specific concerns.
What a company lockdown means
EVERPEAK has a company lockdown mode for situations that require a stronger restriction on access. When activated, it restricts company services, ends non-Founder account sessions, and limits company operations to the Founder while the issue is addressed.
Public news and the status page remain available for official updates. News comments and other account actions are paused for ordinary readers during a lockdown. You may see a lockdown notice or find that a service is temporarily unavailable.
The status page identifies affected services and provides published incident updates. Follow those updates for information about availability and recovery. You do not need to repeatedly attempt sign-in or share a verification code with anyone to make services return.
Signs that deserve a closer look
Pay attention to a password change you did not request, account details you did not edit, unfamiliar sessions, or messages sent in your name. An unexpected verification code also deserves attention: do not approve or share it. A code request alone does not establish that someone successfully accessed your account. The FTC's account recovery guide explains common warning signs and recovery steps.
If you think an account has been compromised
Start from a trusted device. If you suspect malicious software on your usual device, use another trusted device to begin recovery. Update and scan the affected device before relying on it again. Australia's Cyber Security Centre recovery guide explains steps for securing compromised accounts and devices.
Go directly to the provider. Open its official website or app and use its recovery process. For an EVERPEAK concern, visit EVERPEAK Support. For a compromised email or social account, use that provider's support service.
Secure your email and recovery settings. Check that recovery addresses and phone numbers belong to you. Review unfamiliar email forwarding rules, filters, and connected apps. Email access can be used to reset other accounts, so securing your inbox is a priority.
Change affected passwords and end unwanted sessions. Choose a strong, unique password. Change reused passwords on other accounts, too, and use the provider's option to sign out devices and apps. Enable two-factor authentication where available. These steps follow the UK National Cyber Security Centre's recovery guidance.
Review what happened and warn affected contacts. Check recent messages, account changes, and activity. If someone used your account to contact others, tell those people to disregard suspicious messages or requests. The FTC recommends reviewing account activity and notifying contacts after regaining control.
Escalate financial or identity concerns. If money or financial accounts are affected, contact the relevant bank or payment provider through its official channels promptly. If personal information has been misused, use your country's official identity-theft reporting service. The Australian Cyber Security Centre guide also covers protecting money and connected accounts after a compromise.
How to report a concern to EVERPEAK
Visit support.everpeakvisuals.com and explain what you noticed, approximately when it happened, and whether you can still sign in. Include the affected account's email through the private support form and describe any changes or messages you do not recognize. If you attach a screenshot, hide verification codes, passwords, payment details, and unrelated personal information first.
EVERPEAK Visuals employees will never ask for your password, authenticator code, recovery code, or email verification code. Enter codes only into the official verification screen for an action you initiated. Do not send them through comments, social messages, or support conversations.
If you cannot access EVERPEAK services, check status.everpeakvisuals.com for service notices and published incident reports. We will use our public update channels to share information about affected services as it becomes available.
Keep the small habits that make a difference
Use a different password for each service, keep recovery information current, enable the verification options available to you, and end sessions on devices you no longer use. Keep private account conversations in official support channels.
We are continuing to improve how EVERPEAK handles account access, recovery, and service communication. If something seems wrong, report it early so it can be reviewed.