Skip to main content

Security

Docu Ninja provides several security features to protect your account and documents.

Password management​

Change your password​

  1. Go to Account Settings.
  2. Click Change Password.
  3. Enter your current password and your new password.
  4. Click Save.

Forgot your password​

  1. On the login page, click Forgot Password.
  2. Enter your email address.
  3. Check your inbox for a password reset link.
  4. Click the link and set a new password.

Two-factor authentication (2FA)​

Two-factor authentication adds an extra layer of security to your account by requiring a time-based code from an authenticator app in addition to your password.

Enable 2FA​

  1. Go to Settings > Security (or Settings > Enable Two Factor).
  2. Scan the QR code with your authenticator app (Google Authenticator, Authy, etc.).
  3. Enter the 6-digit code from your authenticator app to confirm.
  4. 2FA is now enabled for your account.
warning

Save your recovery codes in a safe place. If you lose access to your authenticator app, you'll need these codes to regain access to your account.

Disable 2FA​

  1. Go to Settings > Security.
  2. Click Disable Two Factor.
  3. Enter your current 2FA code to confirm.
  4. 2FA is disabled.

Phone verification​

You can verify your phone number for additional account security:

  1. Go to Account Settings.
  2. Enter your phone number.
  3. Click Verify.
  4. Enter the SMS verification code sent to your phone.
  5. Your phone number is now verified.

OAuth login​

If you signed up with Google or Microsoft, your account is secured through those providers' security mechanisms:

  • Google — uses Google's OAuth 2.0 security, including their 2FA if enabled.
  • Microsoft — uses Microsoft's authentication, including their MFA if enabled.

API tokens​

API tokens are used for programmatic access via the API:

  • Tokens are generated per company.
  • You can find your API token in Company Settings > API.
  • Treat your API token like a password — do not share it publicly.
tip

Rotate your API token periodically by generating a new one and updating any integrations that use the old token.