Account Security (2FA)

HJToken provides multiple security features — we recommend enabling them all.

Email verification

Sign-up and some sensitive actions require an email code, ensuring your account is bound to a real, reachable inbox.

Two-factor authentication (2FA)

Enable 2FA in Profile · hjtoken.cn/profile:

• Works with standard TOTP apps: Google Authenticator / 1Password / Microsoft Authenticator.
• Once on, login requires your password plus a 6-digit code from your authenticator app.

Steps:

1. Go to Profile → Two-factor authentication.
2. Scan the QR code with your authenticator app.
3. Enter the 6-digit code to confirm.
4. Keep a backup in case you change phones.

Password reset

Forgot your password? Click "Forgot password" on the login page to reset via email.

API key security

• An API key is like a password — never leak it or commit it to public repos.
• Create/delete multiple keys anytime on API Keys · hjtoken.cn/keys, isolated by purpose.
• If a key may be leaked, delete it immediately and create a new one.

Recommendations

• Use a strong password and enable 2FA.
• Use separate keys per use case for easy revocation.
• Periodically check Usage for anomalies.