NHM dashboard account
Create a Free NHM Dashboard Account
Save scans across visits, monitor domains over time, get alerts when DNS, SSL, or email configuration changes, and view compliance evidence for PCI, HIPAA, and cyber-insurance renewals.
Public marketing pages and free tools remain available without an account.
What an account does
The free tools on this site - free IT checkup, domain checkup, password checker, phishing quiz, DMARC reporting service - run without an account and show you a one-time result.
A dashboard account takes the same checks and runs them across every domain you track, on a schedule. You get alerts when DNS records change, certificates near expiry, blacklistings appear, or email authentication posture regresses. You can pull the saved evidence pack for PCI, HIPAA, and cyber-insurance renewals from one place.
The full panel list is on the dashboard tour.
What we collect and how we use it
The account form asks for four fields: your name, email address, phone number, and a password. The name is shown in the dashboard so signed-in team members can see who is logged in. The email address is your login identifier and the address we send alerts to. The phone number is used for account contact and features that can support mobile notifications. Providing a phone number does not enroll you in SMS messages. To receive recurring SMS account, support, service, or security notifications, you must separately select the unchecked SMS consent checkbox. Leaving that box unchecked does not prevent account creation. The password is the credential you use to sign in.
We use the contact information to operate your account and the dashboard features you turn on. We do not sell or share it with third parties for marketing purposes. The full data-handling details live in the privacy policy.
Closing your account: contact us and we will close the account and remove the dashboard data within 30 days. A self-serve account-closure flow is on the roadmap and will land on this page when it ships.
Is this free
Yes. Creating the account is free and the free tier allows daily manual scans. No credit card is required to sign up. Paid plans add automated scans on a schedule, weekly reports, monitoring of additional domains, and access to premium dashboard panels. The tier breakdown lives on the plans page.
You can use the free tier for as long as you want. If a paid plan ever stops working for you, downgrading takes one click in the Account panel and you go back to the free tier.
How your password and data are protected
Passwords are salted and hashed server-side; the password you choose is never stored in a form we can read. The session cookie is HttpOnly, Secure, and SameSite=Strict, so the browser does not expose it to scripts and does not send it when you click a link from another site.
Failed logins are rate-limited: after six wrong attempts against the same account or from the same IP within a 30-minute window, further attempts return a lockout error. Two-factor authentication is supported and can be enabled from the Account panel after you sign in.
The dashboard runs on the same Cloudflare Workers and D1 layer as the rest of nhmohio.com. The same security model that protects the marketing site protects the dashboard.
What happens after you sign up
After the form submits successfully, you are signed in automatically and land on the dashboard. From there, the natural next step is to add the first domain you want to track. The dashboard runs the first scan within a minute or two; you will see results on the Overview tab and can drill into any specific panel from the sidebar.
If you already have an account, sign in on the login page instead.
SMS notifications are optional
Providing a phone number does not enroll you in text messages. SMS notifications require the separate, unchecked consent box in the registration form. You can create and use your account without agreeing to receive SMS messages.