Account and organization
Account and security
Keep account access centralized and revoke a lost secret or device quickly.
#Overview
Keep account access centralized and revoke a lost secret or device quickly.
#Secure every access method
Use a unique password, enable TOTP or a WebAuthn passkey, store recovery codes away from the primary device, and give every API token a descriptive name.
Settings lists sessions and tokens, revokes one or all of them, regenerates recovery codes, and removes WebAuthn credentials. A token value is shown only once when it is created.
#After losing a device or secret
Revoke the affected session or token.
Change the password if it may have been reused.
Regenerate recovery codes after one is used.
Review the audit trail and recent organization resources.