Kiuwan provides security settings to help you protect your account and control user authentication. Use this page to manage password changes, enable additional login protections such as multi-factor authentication (MFA), and manage API tokens for REST API authentication.
Change Password
Account owners can set a new password directly. However, regular users must request a password reset from an account owner.
- Go to Account Management > Change Password.
- Enter your Current Password.
- Enter your New Password (follow the password policy shown in the right-side banner).
- Repeat the new password and click Save.
Multi-factor authentication
Multi-factor authentication (MFA) adds an extra layer of security to your Kiuwan account by requiring a one-time verification code during login. This reduces the risk of unauthorized access, even if a password is compromised.
When MFA is enabled, Kiuwan sends a secure, one-time code to the user’s email address as part of the login process.
- The emailed code is valid for 30 minutes.
- The same code cannot be used for more than one login.
- If a user logs in to two concurrent sessions, they must request a new code for the second session.
- Users can request a new code using Send again.
- After each code request, Send again is disabled for 3 minutes.
- If there are 3 failed login attempts, the user is locked out of their Kiuwan account for 60 minutes.
API Token
API tokens provide a secure way to authenticate REST API requests without exposing a Kiuwan username and password.
Use API tokens when you need to automate Kiuwan integrations, such as CI/CD workflows, scripts, or server-to-server communication. If an integration fails or a token is compromised, you can delete the token and generate a new one without changing the user’s account credentials.
Generate an API token
- Go to Account Management > Security.
- In the API Token section, click Generate API Token.
In the Save API Token dialog, copy the generated token and store it in a secure location.
Enter a name for the token.
Use a clear name that helps identify where the token is used, such as the integration, pipeline, or environment. For more information, click Naming conventions.- Click Save API Token.
Manage API tokens
You can create and manage up to 10 API tokens. The API token list includes the following information:
- Token name
- Creation date
- Last used date
- Actions
Delete an API token
Delete an API token when it is no longer needed, when an integration changes, or when you need to rotate credentials for security reasons.
- Go to the API Token section.
- Find the token you want to remove.
- Click Delete Token.
Confirm the deletion.