Skip to main content

Security Settings

Protect your account with robust security features.

Password Management​

Changing Password​

  1. Go to Settings → Security
  2. Click Change Password
  3. Enter current password
  4. Enter new password (min 12 characters)
  5. Confirm new password
  6. Click Update Password

Password Requirements​

  • Minimum 12 characters
  • At least one uppercase letter
  • At least one lowercase letter
  • At least one number
  • At least one special character

Password Recovery​

  1. Click Forgot Password on login
  2. Enter your email
  3. Check inbox for reset link
  4. Create new password

Two-Factor Authentication (2FA)​

Enabling 2FA​

  1. Go to Security → Two-Factor Authentication
  2. Click Enable 2FA
  3. Choose method:
    • Authenticator app (recommended)
    • SMS verification
  4. Scan QR code or enter key
  5. Enter verification code
  6. Save backup codes

Backup Codes​

warning

Store backup codes securely. They are your only recovery option if you lose access to your 2FA device.

  • 10 single-use codes provided
  • Each code works once
  • Generate new codes anytime
  • Store in password manager

Disabling 2FA​

  1. Go to Security → Two-Factor Authentication
  2. Click Disable 2FA
  3. Enter password
  4. Enter 2FA code
  5. Confirm disable

Active Sessions​

Viewing Sessions​

See all devices where you're logged in:

  • Device type
  • Browser
  • Location
  • Last active

Managing Sessions​

  • Sign out individual sessions
  • Sign out all except current
  • Review suspicious activity

Security Log​

Activity History​

View security-related events:

  • Login attempts
  • Password changes
  • 2FA changes
  • Session activity

Export Log​

Download security log for audit purposes.

API Keys​

Personal Access Tokens​

Create tokens for API access:

  1. Click Generate Token
  2. Name the token
  3. Set expiration
  4. Select permissions
  5. Copy and store securely

Revoking Tokens​

  • Click Revoke next to token
  • Token is immediately invalidated

Advanced Security​

Login Notifications​

Get notified of new logins:

  • New device
  • New location
  • New browser

IP Allowlist (Enterprise)​

Restrict access to specific IPs:

  1. Enable IP allowlist
  2. Add allowed IPs/ranges
  3. Save configuration

Next: Team Management →