IX INDYXQUANT
All Portfolios

Settings & Account

Account Security & 2FA

Protect your account with a strong password, two-factor auth, and session controls.

1 min read settingssecurity2fapassword

Account Security

Your financial data deserves strong protection. Configure it under Security.

  • Two-factor authentication (2FA) — enable an authenticator app (TOTP). This is the single biggest protection against account takeover.
  • Strong password — 12+ characters, unique to this platform, ideally from a password manager.
  • Active sessions — review and revoke sessions you don't recognize.
  • Login alerts — get notified of sign-ins from new devices.

How your data is protected

Tokens are stored in httpOnly cookies (never exposed to page scripts), every API request is scoped to your account, and PII fields are encrypted at rest. Row-level tenant isolation keeps your data separate from every other user's.