Is there two-factor authentication?

Not as a setting yet. You sign in to nouz with your email address and a password. There is no second step to switch on, like a code from an app.

Other protections are in place. The sign-in and signup forms check that a real browser is using them. Every session is signed and checked on each request. Password reset links work once and expire after an hour. Team roles also limit what any one login can do. So an Analyst's session cannot change anything, even if someone misused it.

The strongest thing you can add today is a long, unique password in a password manager. If two-factor sign-in matters for your business, tell support. Requests from merchants decide what we build next. We would rather build this because someone asked than guess.