Security settings
Settings → Security (owners and admins).
Make two-step verification compulsory
Section titled “Make two-step verification compulsory”Two-step verification → “Required for owners, admins, accounts, payroll and HR” (or everyone) → Save. Those people are asked to set it up the next time they open HashBook, before they can do anything else.
Someone lost their phone
Section titled “Someone lost their phone”Find their row → Reset 2-step. They sign in with their password and set it up again. The owner is told.
Laptop lost or something looks wrong
Section titled “Laptop lost or something looks wrong”- Sign out on that person (or My account → Sign out everywhere else for yourself), then change the password.
- Admins can also unlock someone who was locked out after 5 wrong attempts.
- Failed sign-ins for the last 7 days are listed here.
Shared office computer
Section titled “Shared office computer”Set Sign out after inactivity to, for example, 60 minutes.
Alerts owners receive
Section titled “Alerts owners receive”Owners are emailed about permission changes, two-step resets, security policy changes and exports of more than 1,000 rows.
How your data is protected
Section titled “How your data is protected”- Each workspace is sealed off from every other by database row-level security.
- Passwords are hashed with argon2id; logins and ID numbers you store are encrypted.
- Every sign-in and change is in the permanent audit log.
- The HashBook team can’t see your records unless your owner grants time-limited support access — see Subscription & support access.