SECURITY
Keep your phone system secure
Practical advice for protecting your Topaz account, payments, SIP credentials and phones.
Payments
Card payments are taken on Stripe’s hosted checkout. You enter your card details on Stripe; they never touch Topaz.
Account access
Each person who manages the account should have their own Control panel login. Give admin access only to people who need it. If you forget your password, use “Forgot password” on the Control panel login page.
SIP credentials
Each device has its own SIP username and password. Don’t share them in email, chat or screenshots. If one may have leaked, change it in the Control panel and update the phone.
Encryption
The Control panel and signup pages use HTTPS. Phones register over UDP or TCP on port 5060; encrypted calling (TLS and SRTP) is not available yet.
Watch for unexpected calls
Check call history and your balance regularly. Because Topaz is prepaid, paid calls stop when your credit runs out, which limits what unexpected calling can cost.
Desk phones
Change the default admin password on desk phones, keep their firmware up to date, and don’t expose a phone’s web interface to the internet.