Security and 2FA

Security settings help protect your account and organization data. Use two-factor authentication when your account supports it, and keep API keys locked down.

Two-factor authentication

Two-factor authentication requires a second factor when signing in with your password.

Typical setup:

1. Open Account Settings.
2. Go to the security or two-factor section.
3. Enter your current password if requested.
4. Scan the QR code with an authenticator app.
5. Enter the 6-digit code.
6. Save backup codes.

Store backup codes in a secure place. Each backup code can be used once if you lose access to your authenticator.

When 2FA is unavailable

If your account signs in through an external provider, 2FA may need to be managed through that provider or require a password-backed sign-in method first.

Password tips

• Use a unique password.
• Avoid sharing accounts.
• Revoke other sessions after changing a password if you suspect compromise.
• Use your company’s SSO flow if required.

API key security

API keys can access organization data. Keep them secure:

• never expose keys in frontend code
• never commit keys to version control
• use separate keys per system
• revoke unused keys
• rotate keys when team members leave

Open in iSearchFrom

Open Account Settings in the app. Personal sign-in security lives in Account Settings. API key security lives in API Keys.

Related docs

• Authentication and API Keys
• Single Sign-On
• Roles and Permissions