Skip to content
Novadesko Documentation
Guide Demo
English
Open the app

Account security

Change your password, enable two-factor authentication and approve new sign-ins, know where your token is stored, sign out.

Updated on 06/10/2026 Edit this page Open in the full documentation

The Security section of the profile covers "Password, two-factor authentication and PIN code". You open it from the user menu, User profile, then Security in the left column. This page also describes what happens when you sign out and where your login token is kept depending on the device.

Changing the password

  1. In the Password card, enter Current Password, New password and Confirm password.
  2. The « Une majuscule » (one upper-case letter), « Un chiffre » (one digit) and « Un caractère spécial » (one special character) badges turn green as the new password meets the rules. It must also be at least 8 characters long.
  3. Click Update password. The message "Password updated successfully" confirms it.

If the two entries differ, the app replies "Passwords do not match". An account created with Continue with Apple and without a Novadesko password shows the « Définir un mot de passe » (set a password) card instead, without a "current" field.

Forgotten your password? On the login screen, Forgot password? sends a reset link by e-mail.

Two-factor authentication

The Two-Factor Authentication card ("Protect your account with Google Authenticator") carries the Enabled or Disabled badge.

Operation Where
Enable (scan the QR code), disable Web app only: « Ouvrir sur le web » (open on the web) button, which leads to the Security section of your web profile.
Enter the code at sign-in Everywhere: web, desktop, mobile.
Approve or reject a pending sign-in Desktop and web apps, in this same card.

When signing in with 2FA enabled, the « Vérification du compte » (account verification) screen asks for the six-digit « Code d'authentification » (authentication code) provided by your authenticator app. The « Utiliser un code de récupération » (use a recovery code) link replaces the field with « Code de récupération » (recovery code) so you can enter one of the emergency codes given to you at activation.

On the web, the Don't ask again on this device option avoids asking for the code again for 7 days on that device (1 day if your IP address changes).

Warning

Keep your recovery codes outside the application, for example in a password manager. Without them and without your phone, you will no longer be able to sign in.

Approving a new sign-in

When 2FA is enabled, "new sign-ins must be approved". The card lists the pending sign-ins, with the device name, location, IP address and age. Click Approve or Reject. Without a request, the card says "No sign-in awaiting approval".

Mobile app PIN code

The PIN Code card concerns the six-digit code that protects opening the mobile app. It is set from the Novadesko mobile app (iOS, Android). The badge shows PIN code enabled or PIN code not set.

Sessions and devices

There is no screen listing open sessions. Two reference points remain available:

  • the user menu shows the IP address and country of the current connection;
  • the list of sign-ins awaiting approval, if 2FA is enabled.

If you think an unknown device has access to your account, change your password, reject the pending sign-ins and contact support through a ticket.

Where your login token is stored

After signing in, the app keeps a token so it does not ask for the password every time it opens (Remember me checkbox).

Platform Storage
iOS, Android System keychain (Keychain, Keystore), encrypted by the device.
macOS, Windows, Linux App preferences, without going through the keychain.
Browser (web.novadesko.com, app.novadesko.com) Browser local storage.
Note

On a shared computer, sign out at the end of your session: it is the only way to erase the token from that device.

Signing out

Open the user menu and click Logout, in red. The token is revoked on the server and deleted from the device, then the login screen reappears. The other devices stay signed in.

Deleting the account

The Delete Account card warns: "Once your account is deleted, all of its resources and data will be permanently erased."

  1. Click Delete my account.
  2. Enter your Password in the window "This action is permanent. Confirm your identity to continue."
  3. Click Confirm deletion.
Warning

Deletion is immediate and irreversible. Export your documents and transactions first (Export documents, Export transactions).

See also