Account Security and 2FA

Your account is the front door to your workspace. This guide explains how to keep it secure with strong credentials and two-factor authentication.

Strong passwords

• Use a long, unique password not reused on any other site.
• Prefer a password manager to generate and store it.
• Change it immediately if you suspect compromise.

Two-factor authentication

Two-factor authentication (2FA) adds a second step at login, so a stolen password alone is not enough.

• Enable 2FA from your account security settings where available.
• Use an authenticator app to generate time-based codes.
• Store backup codes somewhere safe and offline.

Session safety

• Log out on shared or public devices.
• Sessions are scoped to the host you logged in on, so a customer session and an admin session never collide.

If you are locked out

• Use the password reset flow from the login page.
• If you lose your 2FA device, contact your workspace administrator.

Administrator tips

• Require 2FA for Admin and Super-admin accounts.
• Review the user list and revoke access for anyone who has left.