Documentation / Account security
Account security
Protect access with two-factor authentication and review credentials.
Protect the account that manages agents and integrations. Account settings and workspace permissions serve different purposes: authentication identifies the person; permissions determine available actions.
Enable two-factor authentication
- Open your account settings and security section.
- Start two-factor authentication setup.
- Add the account to your authenticator application using the displayed instructions.
- Enter a valid code to confirm activation.
- Store recovery codes securely, separately from your password.
Adding the authenticator without confirming its code does not complete activation. Verify the final account state before signing out.
Sign in again
Use your usual sign-in method and complete the additional step when requested. If an authenticator code is rejected, check the selected account and device time synchronization.
To disable two-factor authentication, use the settings action and complete the required confirmation. Do not share recovery codes with other workspace members.
Review integrations
Review external-service credentials when changing someone's access or suspecting exposure.
Keep secrets out of prompts, public content, tickets and screenshots. When requesting help with access, describe the step and error without sending a password or authentication code.
For exports or deletion, see Privacy.