My Trinity™ Security

Future-ready account protection—without pretending accounts are live.

Explore the standards Trinity intends to use for secure sign-in, recovery, trusted devices, sessions, privacy, and customer control when My Trinity accounts are activated.

Current Status

Your browser tools remain local today.

Live My Trinity accounts, passwords, cloud synchronization, and account recovery are not active. This page explains the standards required before those capabilities are introduced.

The Security Standard

Six layers of responsible account protection.

1. Strong Sign-In

Support secure passwords and modern passkeys, with rate limiting and protection against automated abuse.

2. Multi-Factor Protection

Offer an additional verification step for sensitive actions, recovery, and account changes.

3. Safe Recovery

Use verified recovery methods, one-time links, limited lifetimes, and clear customer alerts.

4. Session Control

Let customers review active sessions, sign out other devices, and receive notices about unusual activity.

5. Data Minimization

Collect only what is required, separate wellness planning from commerce, and provide deletion and export controls.

6. Transparent Support

Never ask customers to share passwords, passphrases, payment credentials, or one-time security codes by email.

Browser Capability Check

See what this device may support.

This local check does not create an account or transmit device information.

Recovery Principles

Recovery should restore access—not weaken security.

  • Recovery links should expire quickly and work only once.
  • Changes to email, phone, password, or passkey should trigger alerts.
  • Support teams should verify identity without collecting secrets they do not need.
  • High-risk changes may require a waiting period or additional review.
  • Customers should be able to revoke sessions after recovery.

Security Self-Check

Prepare for a future My Trinity account.

Complete the checklist to review your readiness.

Important

Trinity will never ask for your password or passphrase by email.

Use Customer Care for account questions. Report suspicious messages or unexpected security prompts before clicking links or sharing information.