Security Settings Guide

By creavio Team April 10, 2026 1 views

Security Settings Guide

Your creavio account holds client data, financial records, and your entire body of work. Protecting it is not optional. Here are the security settings you should know about.

Password Management

Change your password in Settings > Security > Password. Requirements:

  • Minimum 8 characters
  • At least one uppercase letter, one number, and one special character
  • Cannot be the same as your last 3 passwords

Use a password manager. Do not reuse your creavio password on other sites.

Session Management

Under Settings > Security > Sessions, see all active sessions for your account:

  • Device type (desktop, phone, tablet)
  • Browser
  • Location (approximate, based on IP)
  • Last active time

If you see a session you do not recognize, click Revoke to terminate it immediately. Use Revoke All to sign out of every device at once if you suspect unauthorized access.

API Keys

If you use the creavio API for custom integrations (available on Studio plan and above):

  1. Go to Settings > Security > API Keys
  2. Click Generate New Key
  3. Name the key (e.g., "Zapier integration" or "Custom website")
  4. Copy the key immediately — it is shown only once

Each key can be scoped to specific permissions (read-only, read-write, or specific endpoints). Revoke keys you no longer use.

Never share API keys in emails, messages, or public repositories. Treat them like passwords.

Login Notifications

Enable login notifications in Security settings to receive an email every time someone logs into your account from a new device. This is an early warning system for unauthorized access.

Data Export

You own your data. Export it anytime from Settings > Security > Data Export:

  • Client data — all client records as CSV
  • Financial data — invoices, expenses, transactions as CSV
  • Media metadata — file names, tags, AI analysis data as JSON
  • Website content — pages and blog posts as HTML

Media files (photos and videos) can be downloaded from the media library or collections directly. The export function covers structured data, not the files themselves.

Account Recovery

If you lose access to your account:

  1. Click Forgot Password on the login page
  2. Enter your email address
  3. Check your email for a reset link (expires in 1 hour)
  4. Set a new password

If you no longer have access to your email, contact support at [email protected] with your account details for identity verification.

What creavio Does to Protect You

  • Encryption — all data is encrypted in transit (TLS) and at rest
  • Infrastructure — hosted on Cloudflare's global network with DDoS protection
  • Authentication — JWT tokens with automatic expiry and refresh
  • Rate limiting — API and login endpoints are rate-limited to prevent brute force attacks
  • Regular backups — database backups are taken automatically