Security best practices (Google SSO strategy)
ACFS is built for velocity. This page covers account security so your “one login everywhere” setup stays safe.
Scope note
This is account security (SSO, passwords, recovery). It’s not a full VPS-hardening guide.
Why we recommend Google SSO
- Fewer passwords means fewer weak points.
- One identity across services makes setup smoother (especially for beginners).
- Faster recovery: if you lose access to a service, you recover through Google.
The model:
Your Google Account
├── Tailscale (VPS access)
├── Claude (primary coding agent)
├── ChatGPT / Codex (secondary agent)
├── Gemini (optional agent)
├── Vercel (deployments)
└── Supabase / Cloudflare (optional)
├── Tailscale (VPS access)
├── Claude (primary coding agent)
├── ChatGPT / Codex (secondary agent)
├── Gemini (optional agent)
├── Vercel (deployments)
└── Supabase / Cloudflare (optional)
The trade-off
Centralizing access is powerful, but it creates a single point of failure. That’s why securing your Google account is step zero.
Secure your Google account
If you do only one thing: enable 2‑Step Verification with an authenticator app (not SMS).
Services without Google SSO
Some services don't support Google SSO (or you may choose not to use it). For those:
- Use a strong, unique password (password manager recommended).
- Enable the service's built-in 2FA.
- Prefer authenticator apps or security keys over SMS.
Password manager recommendations
For services without Google SSO, use a password manager to generate and store strong, unique passwords.
1Password
Best overall. Great UX, developer tools.
Bitwarden
Best free option. Open-source.
Apple Keychain
Built into macOS/iOS. Good if already in Apple ecosystem.
What if Google gets compromised?
If you suspect unauthorized access, act immediately:
- Change your Google password from a trusted device.
- Revoke all app permissions at myaccount.google.com/permissions.
- Check recent activity at myaccount.google.com/device-activity.
- Re-authenticate all SSO services (log out and back in).
- Enable Advanced Protection to prevent future compromises.
Quick security checklist
Track your progress here (saved to localStorage on this device).
Tip: if you’re in the wizard, go back to Accounts after you’ve secured your Google account.