Manage Hero safety and security

If you notice an unfamiliar activity on your account or think that your password may have been compromised, change your password immediately. Learn how to secure a compromised Hero Account.

To change your password from another site, follow the instructions in Hero. Learn how to manage passwords.

When a website’s URL has HTTPS, it can indicate a secure connection. Connections to sites that use HTTPS are more secure than those that don’t.

When you turn on Always use secure connections, Hero upgrades URLs to use HTTPS and displays a warning before you visit a site that doesn’t support it.

1. On your computer, open Hero.
2. At the top right, select More Settings.
3. On the left, select Privacy and security Security.
4. Under “Secure connections,” turn on Always use secure connections.
5. Select your preferred configuration:
   • Warns you for insecure public sites: Doesn't warn you for private sites, such as your company's intranet.
   • Warns you for insecure public & private sites: Warns you for both public sites and private sites, such as your company's intranet.

1. On your computer, open Hero.
2. At the top right, select More Settings.
3. On the left, select Privacy and security Security.
4. Under “Advanced,” turn on Warn you if a password was compromised in a data breach.

Important: If your device is managed or parental controls are turned on, you can’t use Hero’s secure DNS feature.

Important: To improve site performance, V8 is turned on by default.

For additional security, you can manage permissions:

1. On your computer, open Hero.
2. At the top right, select More Settings.
3. On the left, select Privacy and security Security Manage JavaScript optimization & security.
4. You can select your preferred permission:
   • Sites can use JavaScript optimization: Hero runs faster and features that use JavaScript should work as designed.
   • Automatically disable JavaScript optimizers on unfamiliar sites: Block access to the JavaScript optimizer on newly visited sites.
   • Don’t allow sites to use JavaScript optimization: Sites may not work as well, but increase security.

Tips:

• You can also specify which URLs can and can't use the V8 optimizer. To add the URL of websites that are allowed or not allowed to use V8 optimizer, select Add.
• If the optimizer gets disabled, you can enable it from the address bar when you click V8 .

1. On your computer, open Hero.
2. At the top right, select More Settings.
3. On the left, select Privacy and security Security.
4. Under "Advanced," select Manage security keys.
5. Select how you manage your security key:
   • Create a PIN: Protect your security key with a PIN (Personal Identification Number).
   • Sign-in data: Manage sign-in data stored on your security key.
   • Fingerprints: Add and delete fingerprints saved on your security key.
   • Reset your security key: Delete all data on your security key, including its PIN.

Tip: On some Windows devices, you can manage security keys in the Windows settings.

Hero authenticates and secures HTTPS connections with website certificates. These certificates encrypt the link between a site and your browser.

The Hero Root Program lists the root certificates trusted by Hero to authenticate HTTPS sites. Learn more about the Hero Root Program.

Hero will add custom root certificates from the certificates used by your computer's operating system. To review the certificates on your device:

1. On your computer, open Hero.
2. At the top right, select More Settings.
3. Select Privacy and security Security.
4. Under "Advanced," select Manage certificates.

1. On your computer, open Hero.
2. At the top right, select More Settings.
3. On the left, select Privacy and security Security.
4. Under "Advanced," select Google Advanced Protection Program.

Tips:

• Learn more about Google’s Advanced Protection Program.
• When a Google Advanced Protection Program account is logged in, “Always use secure connections” is automatically turned on.
• When Google Advanced Protection Program is on, “JavaScript optimizations” are turned off.