Overview
Xakia has built-in safeguards: strong passwords, multi-factor authentication (MFA), and single sign-on (SSO).
This article covers how each one works and how to keep your account secure.
Passwords
Xakia follows secure credential storage best practices. Every password must include:
At least 8 characters
One uppercase letter
One lowercase letter
One number
One special character
Tip
We recommend a password manager. It creates a strong, unique password for every site and keeps them in an encrypted vault. You remember one master password, and it fills in the rest. You log in faster, and every account gets safer.
Multi-Factor Authentication (MFA)
MFA adds a second layer of security on top of your password. Even if someone learns your password, they can't get into your account without the current code from your authenticator app.
Xakia uses Time-based One-Time Passwords (TOTP) through an authenticator app such as Google Authenticator or Microsoft Authenticator. Xakia doesn't use text-message (SMS) or email codes, which are easier to intercept.
Set it up here: Set Up MFA For Individual Users or, if you're an admin, Set Up MFA For Your Organization.
Important
From July 1, 2026 at 9:00 AM PT, MFA will be required for everyone who signs in to Xakia with a username and password. Set it up now so the change doesn't interrupt your team. Users who sign in through SSO are not affected.
Single Sign-On (SSO)
Xakia supports SSO using OpenID Connect (OIDC), authenticating against a Xakia Microsoft Entra (formerly Azure Active Directory) tenant application. Your company federates to its own Entra / AAD tenant and adds the Xakia application. To set this up, follow the steps in the Microsoft Entra SSO article.
Note
When SSO is enabled, your identity provider handles sign-in, including any MFA you've configured there. Xakia's built-in MFA is turned off for those users.