Cloudflare Account Security Baseline
Document: INF-202Type: Standard / SOPStatus: ApprovedOwner: Cloud EngineeringVersion: 4.2.0Updated: 2026-07-17
Required controls
| Control | Cloudberrie standard |
|---|---|
| Password | Unique, generated, stored only in the approved password manager |
| MFA | Authenticator app required |
| Passkey / security key | Recommended secondary factor |
| Recovery codes | Download and store outside the primary device |
| Recovery inbox | accounts@cloudberrie.com must remain operational |
| Additional administrators | Invite individual identities later; do not share the owner password |
Setup procedure
- Open profile or authentication settings.
- Register an authenticator application and verify one code.
- Download recovery codes and record their storage location in the private asset register.
- Add a passkey or hardware security key where available.
- Log out and confirm login works with the password plus MFA.
Validation
MFA challenge appears during a new-session login. Recovery codes are stored and not committed to Git. Browser password reuse is avoided. No personal Gmail account owns the platform.