A practical guide to account security: 2FA, API key rotation, and sessions
Three controls that actually matter for an account holding wallet balance — and how to use each one.
An account with wallet balance is worth securing properly — not with a wall of settings you'll never touch, but with a few controls that meaningfully reduce risk.
1. Two-factor authentication
Turn it on in account settings. It's a standard TOTP flow (works with any authenticator app), and it means a leaked password alone isn't enough to get into your account.
2. API key rotation
If you use the API and suspect a key was exposed — committed to a public repo, pasted somewhere it shouldn't be — rotate it immediately from settings. The old key stops working the instant the new one is issued.
3. Session awareness
Every request is validated per-session server-side, not just trusted off a long-lived token. If something looks wrong, sign out everywhere and sign back in — this invalidates every existing session at once.
The habit that matters most
None of these controls do much if the underlying password is weak or reused elsewhere. A unique password plus 2FA covers the overwhelming majority of real-world account-takeover attempts.
Ready to try it yourself?
Get a Number Now