Security best practices

Enable MFA, use strong unique passwords, and limit access by role. Review API keys regularly and rotate them on a schedule.