Korvex provides enterprise-grade security features to protect your data and accounts.

Two-Factor Authentication (2FA)

Setup

1. Go to Profile or Settings > Security
2. Click Enable 2FA
3. Scan the QR code with your authenticator app (Google Authenticator, Authy, etc.)
4. Enter the 6-digit verification code to confirm

Recovery

Keep your backup codes in a secure location. If you lose your authenticator device, use a backup code to regain access.

Passkeys (WebAuthn/FIDO2)

Passkeys provide passwordless login using biometric authentication (fingerprint, face ID) or hardware security keys.

1. Go to Profile > Security
2. Click Add Passkey
3. Follow your browser's prompt to register a passkey
4. Name your passkey for identification (e.g., "MacBook Touch ID")

Audit Logs

The audit log records all significant actions:

• Login attempts (successful and failed)
• Role and permission changes
• Client data exports
• Configuration changes
• API key creation and revocation

Best Practices

• Enable 2FA for all team members, especially those with Admin access.
• Use passkeys where possible — they're phishing-resistant and more secure than passwords.
• Review audit logs monthly for unexpected access patterns.
• Rotate API keys annually.