To protect your business from unauthorized access, we strongly recommend enabling 2FA. NextGen supports both SMS text messages and Authenticator apps (like Google Authenticator or Authy).
How to enable 2FA:
- Log into your NextGen dashboard and click Settings.
- Navigate to the Security tab.
- Click Enable Two-Factor Authentication.
- Scan the QR code with your authenticator app and enter the 6-digit code.
If you have forgotten your password, you can request a secure reset link from the login screen.
Click the "Forgot Password?" link below the login form. Enter the email address associated with your NextGen account. If a matching account is found, we will email you a temporary, time-sensitive link to create a new password. For security reasons, this link expires after 15 minutes.
Your Secret API keys (`sk_live_...`) can perform any action on your account without restriction. They should never be hardcoded into your frontend application, mobile app, or committed to GitHub.
Best Practices:
- Store your Secret keys in environment variables (`.env`).
- If you suspect a key has been compromised, immediately click Roll Key in your dashboard to generate a new one and invalidate the old one.