Skip to main content

Security

Protecting your data and recruiting pipeline is a top priority. Use the Security Settings to manage how you access NoRecruit and who has permission to interact with your account.

Updated this week

🔐 Password Management

Maintain a secure barrier for your account by keeping your credentials updated.

  • Updating Your Password: Navigate to Settings > Security. You must provide your current password to authorize a change.

  • OAuth Users (Google): If you initially signed up via Google, you can add an email and password login to your account. This gives you two ways to sign in and ensures you aren't locked out if you lose access to your Google account.

Requirement: We recommend passwords be at least 8 characters long, including a mix of uppercase, lowercase, numbers, and symbols.

🛡️ Multi-Factor Authentication (MFA)

MFA provides an essential second layer of security by requiring a code from your mobile device in addition to your password.

Setup Process

  1. Click "Setup a new Factor."

  2. Scan the provided QR code with a TOTP app (e.g., Google Authenticator, Authy, or 1Password).

  3. Enter the 6-digit verification code and name the factor (e.g., "Personal Phone").

Managing Access

  • Multiple Factors: You can enroll more than one device as a backup.

  • Unenrollment: If you get a new phone, be sure to enroll the new device before removing the old factor to avoid being locked out.

🔗 Linked Sign-In Methods

Manage which third-party providers can access your NoRecruit account.

  • Linked Methods: These are your active "Quick Sign-In" options (like Google).

  • Unlinking: You can remove a provider at any time, provided you have at least one other way to sign in (either another provider or a standard email/password).

⚠️ Danger Zone: Account Deletion

Deleting your account is permanent and results in the immediate loss of all data.

  • What is lost: All candidate history, active campaigns, team settings, and integration tokens.

  • Billing: Any active paid subscriptions are automatically terminated.

  • To Delete: Scroll to the bottom of the Security page, click "Delete your Account," and type DELETE to confirm.

💡 Security Best Practices

  • Use a Password Manager: Tools like 1Password or Bitwarden help you maintain unique, complex passwords for every service you use.

  • Device Hygiene: Ensure the computer you use for recruiting is password-protected and that your browser is kept up to date.

  • Audit Your Integrations: Every few months, visit the Integrations tab to review which third-party apps have access to your NoRecruit data and disconnect any you no longer use.

Did this answer your question?