Securing your account

Two features keep your login secure: two-factor authentication and session management.

Two-factor authentication (2FA)

Add a second step to your login from your profile settings. VehicleMatic supports:

• Authenticator app (TOTP) — scan a QR code with an app like Google Authenticator or 1Password, and you'll be issued recovery codes to store somewhere safe in case you lose your device.
• Email — receive a one-time code by email at sign-in.

2FA is optional but strongly recommended, especially for owners and anyone with billing or team permissions.

Active sessions

The Active sessions page (/app/{your-company}/active-sessions) lists the devices currently signed in to your account. If you see anything you don't recognise — or you've used a shared or public computer — choose "Sign out everywhere else" to end every other session at once. You'll confirm with your password.

Good habits

• Turn on 2FA and keep your recovery codes safe.
• Review active sessions periodically.
• Give each teammate their own login with an appropriate role rather than sharing accounts.