> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nico-jobagent.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Two-factor authentication, backup codes, and API keys

# Security

Protect your Nico account with two-factor authentication (2FA) and manage API keys for bot integrations.

## Two-factor authentication (2FA)

Two-factor authentication adds an extra layer of security by requiring a verification code in addition to your password when signing in.

### Setting up 2FA

1. Go to **Security** in your account settings
2. Click **Enable Two-Factor Authentication**
3. Scan the QR code with your authenticator app (Google Authenticator, Authy, 1Password, etc.)
4. Enter the 6-digit verification code from your app to confirm
5. **Save your backup codes** — you'll need these if you lose access to your authenticator

<Warning>
  Store your backup codes in a safe place. If you lose your authenticator device and don't have backup codes, you won't be able to access your account.
</Warning>

### Signing in with 2FA

After entering your email and password, you'll be prompted for a verification code:

1. Open your authenticator app
2. Enter the 6-digit code displayed for Nico
3. Click **Verify**

### Using backup codes

If you can't access your authenticator app:

1. Click **Use backup code** on the verification screen
2. Enter one of your saved backup codes
3. Each backup code can only be used once

### Disabling 2FA

1. Go to **Security** in your account settings
2. Click **Disable Two-Factor Authentication**
3. Confirm with your current verification code

## API keys

API keys allow bot users to access Nico programmatically. See [API Keys](/integrations/api-keys) for details on creating and managing keys.