Welcome to Xendit’s latest documentation. For legacy content, access the previous version here.

Overview

Prev Next

At Xendit, we take security seriously because protecting your business is paramount. We employ robust measures like Two-factor Authentication (2FA), granular user permissions, and secure API keys to safeguard your account and sensitive information.

Here's why account security is important:

  • Prevents unauthorized access: Malicious actors could gain access to your data or make payments using your Xendit account.

  • Maintains trust with customers: Customers expect their payment information to be safe.

How you can optimize your security

  • Two-factor authentication (2FA): Adds an extra layer of security by requiring a code from your phone in addition to your password.

  • User permissions: Control who can access different parts of your Xendit account.

  • API Keys: Restrict access to your Xendit account through APIs.

  • Secure integration practices: Protect your integration by employing integration security best practices.

Follow these best practices to further enhance your account security:

  • Use a strong password: Create a password that is at least 8 characters long and includes a mix of uppercase and lowercase letters, numbers, and symbols.

  • Don't share your password with anyone: This includes writing it down or storing it electronically in an insecure way.

  • Be cautious of phishing emails: These emails try to trick you into revealing your personal information.

  • Enable 2FA: This is the most important security measure you can take.

  • Monitor your account activity: Regularly review your account activity for any suspicious activity.

  • Report any suspicious activity: If you suspect that your account has been compromised, contact Xendit support immediately.

By taking these steps, you can help keep your Xendit account secure and protect your data and funds.