Secure your account

Quick answer

Use unique strong passwords, enable MFA for admin accounts, limit admin seats, and sign out on shared devices.

MFA (authenticator app)

1. Open Settings → Security.
2. Click Set up MFA, scan the QR code, and enter the verification code to activate.
3. To disable MFA later: enter your current password and a valid MFA code, then click Disable MFA.

• SSO users rely on their identity-provider MFA (Kadova TOTP is not prompted after OIDC).
• Lost authenticator? Disable MFA from an active session, or contact support.

Recommendations

• Enable SSO if your organisation supports it (see your admin console).
• Review active users quarterly and remove leavers promptly.
• Never share login credentials or MFA codes between staff members.
• Use the mobile app only on managed devices where possible.

If you suspect unauthorised access

1. Reset affected passwords immediately.
2. Review recent gift-card activity and user list.
3. Contact Kadova support with your organisation ID if anything looks wrong.