Account security
No password to steal: every sign-in uses a fresh one-time code, and you can see and end every session yourself.
How do I sign in without a password?
Open Sign in, type the email address on your account, press Continue, then type the six-digit code from the email and press Verify.
A code works once and for fifteen minutes; after five wrong tries it stops working, so press Resend code for a new one.
How do I see where my account is signed in?
Open Settings, then Your sessions and devices, to see every sign-in with its status and times, and your recent sign-in activity.
Wrong code entered and Sign-in locked entries show failed attempts, so you can check whether each one was you.
What do I do if I lose a device or see a sign-in I do not recognise?
Press Sign out of all devices on Your sessions and devices, sign in again, then rotate your API keys on Keys.
Sign out of all devices ends every sign-in, including the one you are using, but it does not change your API keys, which is why you rotate them. If you are still worried, open a support case.
What should I never share?
Never share an API key secret or a voucher PIN with anyone, because Nija support never needs either one.
A key secret is shown once, when it is created; if it leaks, rotate the key for a new one.
How do I change the email address I sign in with?
On Profile, press Add or change a contact, type the new address, press Send code, then type the code sent to that address and press Confirm contact.
Nothing changes until the code is confirmed, and the contact you already had is told about the change.
Under Sign-in contacts, each contact a sign-in code can reach is marked Signs you in. Codes go to email addresses only, so a phone number on your account cannot sign you in.
If the code expires or stops working, press Resend code for a new one; the address you typed stays in place.
What should I do when a program asks to use my Nija account?
Check the address Nija shows for the program, and only if you recognise it set a spend cap and an end date and press Authorize this application; otherwise press Do not authorize.
Nija cannot check the name the program gives itself, so judge it by the address. An authorized program gets a key of its own and never sees your sign-in or the keys you already have.
How do I cut off an application I authorized?
Open Connected applications from Keys and press Disconnect beside the program, and its key stops working on its next request while your other applications carry on.
Disconnecting cannot be undone: to let the program back in, authorize it again. The list also shows what each program has spent against its cap and when it last made a request.
Where do I read a security notice Nija sent me?
Open Notifications, the bell in the chat, where Security notices at the top lists any notice Nija has sent you about a breach affecting your information, with its reference and date.
Open a notice to read what could happen as a result, what Nija has done or plans to do, what you can do, and who got the information. With no notice to show, the section says none has been sent to you.
This article as plain markdown
Ask the support bot
It answers from the Nija help articles only. Never type a password, an API key or a voucher PIN here.