Skip to main content

Security

Your account and your data are a shared responsibility. Frihet protects access with the measures described here, and you control password, sessions and second factor from Settings → Security.

Authentication​

Sign-in with Cloudflare Turnstile​

When you sign in, Frihet checks that you are a person with Cloudflare Turnstile, a humanity check without a traditional CAPTCHA. In most cases it needs no action. If you have problems, make sure JavaScript is enabled in your browser.

Login providers​

In Settings → Security → Login providers you see how you sign in (email and password or other providers) and can link or unlink providers.

Two-factor authentication​

You can add a second factor with an authenticator app. See the two-step authentication guide.

Password​

Change your password​

In Settings → Security → Change password:

  1. Enter your current password.
  2. Enter the new password (at least 8 characters). An indicator shows whether it is weak, fair, good or strong.
  3. Confirm it and click Update password.

Recover a forgotten password​

  1. On the sign-in screen, click Forgot password?
  2. Enter your email.
  3. Follow the link in the email you receive to create a new password.

Sessions and sign-ins​

In Settings → Security you can:

  • See your Active sessions (devices where your account is signed in) and revoke one with Revoke, or all the others with Revoke all other sessions.
  • Check the Login history, with the last 20 sign-in events.

Team roles and permissions​

Team roles (Administrator, Editor, Accountant and Read-only) are managed in Settings → Team. See what each role can do in Invite members.

Export your data​

In Settings → Account, privacy section, click Export Data to download your invoices, expenses and contacts as CSV.

Delete your account​

In Settings → Account, the Account deletion request panel lets you register a request, check its status and cancel it while it is pending. Submitting the request records it for manual review: it does not delete the account automatically or immediately. Export your data before you request it.

If you suspect your account is compromised​

  1. Change your password right away.
  2. Click Revoke all other sessions in Settings → Security.
  3. Write to support: security@frihet.io.

API keys​

If you use Frihet's REST API or MCP server, you manage your keys in Settings → API (or in Integrations, API Keys tab). Each key starts with fri_ and carries the same permissions on your account resources.

Recommendations:

  • Generate separate keys for each integration or environment.
  • Revoke keys you no longer use.
  • Do not share keys in public repositories or in plain text.

More details in the API authentication section and in API Keys.

Audit and compliance​

The Activity log (Reports → Activity) shows the account's action history, with filters by date, entity type and action, and CSV export.

For TicketBAI compliance in the Basque Country, see TicketBAI in the Basque Country.

Last updated on