🛡️Security & Identity Hardening
Manage multi-factor authentication (MFA), active browser sessions, and view organization security governance policies.
Two-Factor Authentication (TOTP)
Protect your account with RFC 6238 time-based one-time passwords (Google Authenticator, 1Password, Authy).
Two-Factor Authentication is currently not active on this account. Enabling MFA requires entering a 6-digit code from your authenticator app on every new login.
Security Governance Policy
Platform-enforced tenant isolation and access security policies active for your organization.
Zero-Trust Tenant Isolation
Every API query, database record, and vector RAG retrieval is hard-scoped to your organization ID. Cross-tenant access is rejected fail-closed.
12-Hour Session Invalidation
Authenticated sessions expire after 12 hours. Session tokens are rotated automatically upon credential changes or privilege updates.
Cryptographic Password Hashing
Passwords hashed with scrypt, 16-byte random salts, and verified with constant-time equality checks against timing attacks.
Brute-Force Lockout Defense
Accounts are automatically locked out for 15 minutes after 5 consecutive failed authentication attempts.
Active Device & Browser Sessions
Devices currently signed into your account. Revoke any unrecognized sessions immediately.