Private & Secure: Protecting Your Community Hub Experience

Public pages and member-only areas

Some Community Hub pages are intentionally public so that visitors can understand the church community before registering. These include the homepage, the Community Hub overview, this topic cluster, the About page, Contact page and Give Online page.

Community activity such as the news feed, groups, courses, events, live services, forums and member directory generally requires sign-in. This separation helps protect conversations from broad public indexing and gives the platform more control over participation.

Members should still assume that anything posted online could potentially be copied or screenshotted. Do not share something simply because a page is members-only if the information would cause harm if it were distributed more widely.

Protect your account

Use a strong password that you do not reuse on email, banking or other important services. Reused passwords are dangerous because a breach on one unrelated website can give attackers credentials to try elsewhere. A password manager can help create and store unique passwords.

Your email account is especially important because password-reset links may be sent there. Protect it with multi-factor or two-step verification when available. Google explains its approach to 2-Step Verification, and the UK National Cyber Security Centre recommends adding 2-step verification to important accounts in its online safety guidance.

Never send your password or verification code to another member, administrator, group leader or person claiming to provide technical support. Legitimate support should not need your password.

Share personal information carefully

A community profile can help people recognize and connect with you, but it does not need to contain every personal detail. Avoid posting home addresses, identification numbers, banking information, private documents or information that could be used to answer security questions.

Think carefully before sharing travel plans in real time. A public announcement that a household will be away for several weeks can create unnecessary risk. Share itinerary details only with people who genuinely need them.

Prayer and testimony posts deserve special care. The Prayer Community guide explains how to share needs without exposing another person’s medical, family or financial details.

Safe private messaging

Private messaging is useful for encouragement and coordination, but the word “private” does not make every message trustworthy. Be cautious when someone you do not know immediately asks for money, personal documents, a phone number, an off-platform conversation or sensitive information.

Build relationships gradually. If someone claims to be a leader or representative, verify that role through known community channels. Do not rely only on a profile picture, display name or forwarded screenshot.

If a conversation becomes harassing, sexual, threatening, manipulative or financially suspicious, stop engaging. Preserve relevant information and use reporting or contact channels. You do not owe continued access to someone simply because they say they are a church member.

Recognize common scam patterns

Scams often create urgency: “Send money now,” “Your account will close,” “I am stranded,” or “Keep this confidential.” They may impersonate a leader, friend or relative. Slow down and verify independently using a phone number or contact method you already trust.

Be cautious with shortened or unfamiliar links. A link may lead to a fake sign-in page designed to capture your password. When signing into the Community Hub, check that you are on the correct `celestialchurchchrist.org` domain.

Official online giving is available through the Hub’s Give Online page. Do not treat payment instructions sent unexpectedly through private messages as official simply because they use church language.

Photos, videos and consent

Community life naturally includes photographs and video, but people have different comfort levels. Ask before posting an image that focuses on another person, especially a child, someone receiving prayer or a person in a sensitive situation. Event organizers should provide clear expectations where media coverage is likely.

Do not publish screenshots of private conversations without permission except when necessary to report abuse or protect safety. Even then, share them only with the appropriate person or support channel rather than posting them publicly.

When uploading images for community use, avoid including visible addresses, identification cards, private documents or computer screens that display sensitive information.

Family and child safety

Parents and guardians should remain involved in how children and teenagers use online community features. Review which groups they join, discuss what information should remain private and encourage them to tell a trusted adult when a conversation feels uncomfortable.

Adults should maintain appropriate boundaries with minors. Private one-to-one communication may require special care and should follow applicable safeguarding expectations. Ministry convenience should never override child safety.

Families can also help older relatives avoid scams. Explain that genuine church leaders will not normally demand passwords, verification codes or secret urgent payments. Help relatives bookmark the correct website and recognize official contact routes.

Accessibility and privacy

Security should not make a site unnecessarily difficult to use. Clear labels, readable forms and understandable instructions help members recognize what information they are being asked to provide. The World Wide Web Consortium’s web accessibility introduction explains why digital services should work for people with varied abilities.

Members can contribute by writing clear posts, adding useful image descriptions and avoiding important instructions that exist only as tiny text inside a flyer. Accessible communication reduces confusion and makes suspicious requests easier to recognize.

What to do when something goes wrong

If you believe your account password has been exposed, change it immediately and secure the associated email account. If the same password was used elsewhere, change it on those services too. Review recent activity for anything unexpected.

For harassment, impersonation, unsafe content or suspicious financial requests, use available reporting tools and contact the Community Hub team through the Contact page. Include enough information to investigate without reposting sensitive material publicly.

For immediate threats, abuse, medical emergencies or crimes, contact appropriate local authorities or professional services. Community moderation cannot replace emergency response.

Privacy settings are only one layer of protection

Technical controls matter, but they cannot decide what is wise to share. A members-only group may reduce public exposure, yet another member can still copy information. Before posting, imagine that the content could be seen by someone outside the group. If that possibility would create serious harm, use a more private channel or do not share it online.

Members should periodically review profile information and remove details that are no longer necessary. Old phone numbers, outdated addresses or public biographical details can accumulate over time. Good privacy is an ongoing habit rather than a one-time setting.

When a platform adds new features, take a moment to understand who can see the information before using them. Convenience should not replace judgment.

Device safety matters too

Account security can be undermined by an unsafe phone or computer. Keep operating systems and browsers updated, use a screen lock and avoid leaving a signed-in device unattended in public places. Be cautious on shared computers, and sign out when finished.

Public Wi-Fi can be useful, but sensitive account activity is safer on a trusted network. Avoid installing browser extensions or apps from unknown sources simply because a message claims they are required for a church event.

Back up important personal data independently of the Community Hub. The platform is a place for fellowship, not a permanent storage system for irreplaceable family documents or records.

Impersonation and identity verification

An attacker may copy a leader’s name and profile photo to create a convincing fake account. If someone claiming to be a leader contacts you unexpectedly with an urgent or unusual request, verify through a second channel you already trust. Do not use contact details supplied only in the suspicious message.

Leaders can reduce impersonation risk by using consistent official profiles and reminding members what kinds of requests they will never make privately. Site administrators should respond promptly to credible impersonation reports.

Members should avoid publicly posting enough personal information to make impersonation easier. Birth dates, family relationships, travel details and public phone numbers can be combined by scammers.

A simple security checkup every few months

• Confirm your email address and recovery information are current.
• Change any password that has been reused or exposed.
• Enable two-step verification on your email account.
• Review your Community Hub profile for unnecessary personal details.
• Check group memberships and leave spaces you no longer use.
• Review recent messages for unusual requests or impersonation.
• Remind family members, especially children and older adults, about common scams.

A short periodic review can prevent small risks from becoming larger problems. Security should support fellowship quietly in the background rather than creating fear.

Safer habits for links, files and downloads

Community members often share documents, event flyers and links. Before opening a file from an unfamiliar person, confirm why it was sent. Unexpected attachments can contain malicious software or lead to fake sign-in pages. If a message claims that you must install an app or extension to view ordinary church content, verify that instruction independently.

Use the official website navigation when possible rather than signing in through links inside unsolicited messages. If a browser warns that a connection is unsafe, do not ignore the warning simply because the page uses church branding.

When you share files yourself, remove unnecessary personal data and give them clear names so recipients know what they are opening.

Privacy and security checklist

• Use a unique password and secure your email account.
• Enable two-step verification where available.
• Share only profile information needed for community connection.
• Verify unusual requests through a second trusted channel.
• Use the official Give Online page for church giving.
• Do not send passwords or verification codes to anyone.
• Report impersonation, harassment and suspicious payment requests.