Account and integration security
Secure your InAppify account with password updates, two-factor authentication, recovery-code storage, collaborator permissions and protected API keys
The owner account can access sensitive settings and data. Give each teammate a separate account rather than sharing passwords or embedding secret keys in apps.
Passwords and two-factor authentication
- Open account security settings.
- Enter and repeat a new unique password, then complete the dashboard confirmation steps.
- Enable an available two-factor method, configure the authenticator, and submit the verification code.
- Store the displayed recovery code securely and separately from the device. Do not include it in tickets, tutorial screenshots, or team chats.
Before signing out, confirm activation and access to the authenticator and recovery information. Owner identity verification is different from two-factor authentication; read the identity guide separately.
Team access and integration keys
- Give collaborators only necessary permissions and remove former members.
- Keep secret REST API keys on trusted servers; SDK keys serve a different purpose.
- A customer identifier and public SDK key alone do not prove account ownership. Coordinate customer identification with your authenticated login system.
- After returning from payment, check authoritative payment and entitlement state rather than trusting return-URL parameters.
Unexpected changes
Review project activity and team access. Revoke an exposed secret key and deploy its replacement securely; revocation may interrupt integrations using it. Contact support privately without sharing the key or login codes.