Security

Account security is critical for protecting your links, analytics data, and API access. FWURL provides robust security features including password management and two-factor authentication (2FA) to keep your account safe.

Accessing Security Settings

1. Click your profile avatar in the top-right corner
2. Select Settings from the dropdown menu
3. Click the Security tab

Password Management

Password Requirements

FWURL enforces strong password requirements to protect your account:

As you type your new password, you'll see real-time feedback showing which requirements are met.

Changing Your Password

To update your password:

1. Go to Settings → Security
2. Enter your Current Password
3. Enter your New Password
4. Enter your new password again in Confirm New Password
5. Click Update Password

Tips for strong passwords:

• Use a unique password not used on other sites
• Consider using a password manager
• Avoid common words or personal information
• Mix characters, numbers, and symbols

Password Change Errors

"Current password is incorrect"

• Double-check your current password
• Ensure Caps Lock is off
• Try your password carefully

Requirements not met

• Check each requirement indicator
• Ensure all four requirements show green checkmarks

Passwords don't match

• Re-enter your new password in both fields
• Copy-paste to ensure they're identical

Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security by requiring a verification code from your phone in addition to your password.

How 2FA Works

1. You enter your password as usual
2. FWURL prompts for a 6-digit verification code
3. You open your authenticator app to get the code
4. Enter the code to complete login

Even if someone obtains your password, they cannot access your account without your phone.

Supported Authenticator Apps

FWURL works with any TOTP-compatible authenticator app:

• Google Authenticator (iOS/Android)
• Microsoft Authenticator (iOS/Android)
• Authy (iOS/Android/Desktop)
• 1Password (iOS/Android/Desktop)
• Bitwarden (iOS/Android/Desktop)

Enabling 2FA

To set up two-factor authentication:

1. Go to Settings → Security
2. Click Enable Two-Factor Authentication
3. Enter your current password to confirm your identity
4. A QR code will appear on screen

Setting up your authenticator app:

1. Open your authenticator app
2. Tap Add account or the + button
3. Select Scan QR code
4. Point your camera at the QR code on screen
5. The app will add your FWURL account

Can't scan the QR code?

Use manual entry instead:

1. Click Manual Entry Key to reveal the secret
2. In your authenticator app, choose Enter manually
3. Enter the secret key shown
4. Name the account "FWURL" or similar

Completing setup:

1. Your authenticator app now shows a 6-digit code
2. Enter this code in the Verification Code field
3. The code auto-submits when you enter 6 digits
4. Success message confirms 2FA is enabled

Important: Save your secret key in a secure location. You'll need it to recover access if you lose your phone.

Logging In with 2FA

After enabling 2FA, your login process changes:

1. Enter your email and password
2. Click Sign In
3. Enter the 6-digit code from your authenticator app
4. Click Verify or wait for auto-submit

Tips:

• Codes refresh every 30 seconds
• Enter the current code, not an expired one
• If a code fails, wait for a new one and try again

Disabling 2FA

To disable two-factor authentication:

1. Go to Settings → Security
2. Click Disable 2FA
3. Read the security warning carefully
4. Enter the 6-digit code from your authenticator app
5. Click Disable 2FA to confirm

Warning: Disabling 2FA makes your account less secure. Only disable if absolutely necessary.

2FA Recovery

Lost your phone?

If you've lost access to your authenticator app:

1. Use your saved secret key to set up on a new device
2. Or contact support@fwurl.com for account recovery

Recovery process:

• Identity verification will be required
• You may need to provide account details
• Recovery can take 24-48 hours for security

Preventing lockout:

• Save your secret key securely when setting up 2FA
• Use an authenticator with cloud backup (like Authy)
• Consider adding to multiple devices

OAuth/Social Login Security

If you signed in with Google or Facebook, your security is managed differently:

What's Managed by FWURL

• API token security
• Session management
• Account-level permissions

What's Managed by Your Provider

• Password changes
• Two-factor authentication
• Account recovery

For Google users:

• Manage security at myaccount.google.com
• Enable Google's 2-Step Verification for protection

For Facebook users:

• Manage security in Facebook Settings
• Enable Facebook's Two-Factor Authentication

Session Management

Logging Out

To log out of your current session:

1. Go to Settings → Security
2. Click Logout
3. Confirm when prompted

You'll be redirected to the login page.

Security Best Practices

Always log out when:

• Using shared or public computers
• Finishing work on someone else's device
• You suspect unauthorized access

Session security tips:

• Don't save passwords on shared devices
• Use private/incognito browsing when needed
• Check for the secure padlock in your browser

Security Checklist

Use this checklist to ensure your account is properly secured:

• Strong, unique password set
• Two-factor authentication enabled
• Email address verified
• Secret key saved securely
• Unused API tokens revoked
• Regular password updates (every 6-12 months)

Reporting Security Issues

If you notice suspicious activity or security vulnerabilities:

1. Change your password immediately
2. Regenerate API tokens if applicable
3. Contact security team at security@fwurl.com

Include in your report:

• Description of the issue
• When you noticed it
• Any suspicious activity details
• Screenshots if relevant

Next Steps

Security questions? Contact security@fwurl.com for urgent security matters or support@fwurl.com for general help.