Account Security and Privacy
Protecting your account, enabling two-factor authentication, and managing API keys securely.
Protecting Your Account
Your Completeful account contains sensitive business and financial information. Follow these best practices to keep it secure:
✓ Use a Strong Password
Create a unique password with at least 12 characters, including uppercase, lowercase, numbers, and symbols.
✓ Enable Two-Factor Authentication
Add an extra layer of security by requiring a verification code in addition to your password.
✓ Never Share Your Credentials
Don't share your login details with anyone. Use team member accounts for collaborators.
✓ Log Out on Shared Devices
Always log out when using public or shared computers.
Enabling Two-Factor Authentication (2FA)
Two-factor authentication significantly increases your account security. Here's how to set it up:
- Log in to your Completeful account and go to Settings → Security
- Click "Enable Two-Factor Authentication"
- Choose your preferred 2FA method (Authenticator App or SMS)
- Follow the on-screen instructions to complete setup
- Save your recovery codes in a safe place
Recommended:
We recommend using an authenticator app (like Google Authenticator or Authy) rather than SMS for better security.
Managing Recovery Codes
When you enable 2FA, you'll receive a set of recovery codes. These codes allow you to access your account if you lose access to your 2FA device.
Important Recovery Code Tips:
- • Store them in a secure password manager
- • Print them and keep them in a safe location
- • Each code can only be used once
- • Generate new codes after using several
- • Never share recovery codes with anyone
Password Management
To change your password:
- Go to Settings → Security
- Click "Change Password"
- Enter your current password
- Enter and confirm your new password
- Click "Update Password"
Password Requirements:
- ✓ Minimum 12 characters
- ✓ At least one uppercase letter
- ✓ At least one lowercase letter
- ✓ At least one number
- ✓ At least one special character
API Keys and Access Tokens
If you're using the Completeful API, manage your API keys carefully:
Generating API Keys
Go to Settings → API to create new API keys. Give each key a descriptive name to track its use.
API Key Security
- • Never commit API keys to public repositories
- • Use environment variables to store keys
- • Rotate keys regularly (every 90 days)
- • Revoke unused or compromised keys immediately
Learn more in our API documentation.
Active Sessions
Monitor and manage where you're logged in:
- Navigate to Settings → Security → Active Sessions
- Review the list of devices and locations where you're logged in
- Click "Revoke" next to any session you don't recognize
- Use "Log out all devices" if you suspect unauthorized access
Privacy and Data Protection
We take your privacy seriously and comply with GDPR, CCPA, and other data protection regulations. Your data is:
- Encrypted in transit and at rest
- Stored in secure, SOC 2 compliant data centers
- Never sold or shared with third parties for marketing
- Only accessed by authorized personnel when necessary
Read our full Privacy Policy for more details.
Suspicious Activity
If you notice any suspicious activity on your account:
- Change your password immediately
- Revoke all active sessions
- Review recent activity in your account
- Check your payment methods and billing information
- Contact our support team immediately
Emergency Contact:
If you believe your account has been compromised, email us at sales@completeful.com for immediate assistance.