Account security: password, two-factor and devices

What it takes to keep a Tovanix account safe:

• Change the login password under Account settings then Security; a successful change signs out all other devices
• Bind TOTP two-factor and store the backup codes offline, away from the device running the authenticator
• Changing the login email takes two steps: prove it is you, then prove the new address works
• Devices lists each session with its device, IP and risk tags, and lets you revoke one or sign out all others
• An API key secret is shown only once at creation; disable or reset it the moment you suspect a leak

Frequently Asked Questions

Do I have to enable two-factor?

It is not mandatory, but it is strongly advised. The account holds a balance and is attached to resources across services, so with only a password a leak anywhere else becomes a leak of the account.

What if I lose my authenticator?

Use the backup codes you saved when binding. If those are gone too, reach us through the Contact page so we can verify your identity.

Related pages: Help Center · Guides & FAQ · Sign up and verify your account · Console tour: where each service lives