Account Security

Your financial data deserves strong protection. Configure it under Security.

Recommended setup

Two-factor authentication (2FA) — enable an authenticator app (TOTP). This is the single biggest protection against account takeover.
Strong password — 12+ characters, unique to this platform, ideally from a password manager.
Active sessions — review and revoke sessions you don't recognize.
Login alerts — get notified of sign-ins from new devices.

How your data is protected

Tokens are stored in httpOnly cookies (never exposed to page scripts), every API request is scoped to your account, and PII fields are encrypted at rest. Row-level tenant isolation keeps your data separate from every other user's.

Still need help? Our team can walk you through any feature.

Contact Support