> ## Documentation Index
> Fetch the complete documentation index at: https://developers.jup.ag/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Account Security

> Protect your account with two-factor authentication and review activity in the audit log.

Protect your account and review who did what.

## Two-factor authentication

Add two-factor authentication (2FA) from your account settings. Supported methods:

* an authenticator app (TOTP)
* email one-time codes
* backup recovery codes

> [!NOTE]
>
> 2FA applies to email and password sign-in only. If you sign in with OAuth, 2FA is not applied, and an account that only uses OAuth cannot enable 2FA.

## Audit log

The audit log records who did what in your organisation. It covers 17 event types:

| Category | Events |
| :- | :- |
| API keys | `api_key.created`, `api_key.deleted`, `api_key.renamed` |
| Plan | `plan.changed`, `plan.subscribed` |
| Payments | `payment.succeeded`, `payment.failed` |
| Members | `member.invited`, `member.removed`, `member.role_changed`, `member.left` |
| Invitations | `invitation.canceled` |
| Firewall rules | `firewall_rule.created`, `firewall_rule.updated`, `firewall_rule.enabled`, `firewall_rule.disabled`, `firewall_rule.deleted` |

Filter the log by event type to find a specific change. Sensitive metadata in each entry is redacted.

Most events are kept for **1 year**. Payment events are kept for **7 years**.

![Audit log view with an event-type filter applied](https://mintcdn.com/jupiter/arcA2CXzcFJzBqWS/static/images/portal-audit-log.png?fit=max\&auto=format\&n=arcA2CXzcFJzBqWS\&q=85\&s=e69b137430700e561e764112058653c4)

## Related

> [card] [Organisations & Teams](https://developers.jup.ag/docs/portal/organisations.md)
>
> Roles and who can manage a team's resources.

> [card] [API Keys](https://developers.jup.ag/docs/portal/api-keys.md)
>
> Key changes are recorded in the audit log.

> [card] [Firewall](https://developers.jup.ag/docs/portal/firewall.md)
>
> Rule changes are recorded in the audit log.

> [card] [Request Logs](https://developers.jup.ag/docs/portal/logs.md)
>
> Per-request history, separate from the audit log.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.