How do I update my user profile?

There are a few changes you can make to your user profile. You can:

• Update your personal information
• Reset your 2FA (two-factor authentication)
• Set your session timeout
• Generate an API key
• Regenerate an API key
• Revoke an API key

How to update your personal information

1. From the side navigation bar, click your username.

2. Make any edits you want to your personal information. The fields you can edit include first name, last name, phone number* and session timeout. The email address can’t be edited.

   Note: For how to change your email address, click here.

3. Click Save Changes.

* Phone number requirements:

• Maximum length: 16 characters
• Allowed separators: spaces, periods (.), and hyphens (-)
• Extensions must use the format x5678
• Do not use ext or include spaces after x

How to reset your 2FA (two-factor authentication)

Note: These instructions apply only if you’re currently logged into Auvik and need to reset your 2FA token. If you’ve lost your Auvik two-factor access and are no longer able to log in, ask an administrator on your Auvik account to reset your 2FA token.

Before you begin, ensure you have access to your authenticator app, as you'll need to scan a new QR code and enter a one-time passcode.

1. From the side navigation bar, click your username.
2. Click Reset Two-Factor Authentication.
3. Scan a QR code and enter a one-time code. If you’re having problems scanning the QR code, click Can't scan the QR code? to display the setup key. to reveal the key for the QR code. The key can be entered into an authenticator that accepts keys.

How to set your session timeout

Auvik's default session timeout is 30 minutes. If there's no activity in Auvik for 30 minutes, your session expires and you'll be prompted to sign in again. On the next click, you’ll be logged out. You can set your session timeout to be shorter or longer.

The 90-day timeout is intended for users who require persistent access and should be used in accordance with your organization's security policies.

1. From the side navigation bar, click your username.
2. From the Session Timeout drop-down, select a new timeout period:
   • 15 minutes
   • 30 minutes
   • 1 hour
   • 2 hours
   • 4 hours
   • 8 hours

   • 90 days

3. Click Save Changes

API keys

After you’ve generated a key, be sure to copy it and keep it safely locked away. If you ever lose an API key, you can always generate a new one.

If you regenerate your API key, make sure you update all the locations where it may be used. Regenerating an API key immediately invalidates the previous key. Update any integrations, scripts, automation tools, scheduled jobs, or Auvik tunnel configurations that use the old key.

Examples include:

• Auvik API integrations
• Custom scripts
• Scheduled jobs (cron jobs)
• Auvik tunnel configurations

Important: For security reasons, the full API key is shown only when it is generated or regenerated. Store it securely before closing the dialog.

To update the API key for the tunnel, change the .auvikrc file. To update the API key for Auvik APIs, change the key in your developed scripts or programs.

Generate an API key

1. Open your profile settings.
2. Click Generate API Key.
3. Copy the API key and store it securely.
4. Click Done.

Regenerate an API key

Warning: Regenerating an API key immediately invalidates the existing key.

1. Open your profile settings.
2. Click Regenerate API Key.
3. Copy the new API key and store it securely.
4. Update all integrations that use the old key.
5. Click Done

Best Practice: Use a Dedicated Service Account for API Keys

To ensure long-term stability and reduce administrative overhead, we recommend creating a dedicated Auvik user account specifically for generating and managing API keys. This user should serve as a service account and not be tied to an individual employee.

By using a dedicated service account:

• You avoid disruptions caused by API key invalidation if an employee leaves the organization or their user account is deactivated.

• You maintain better control and traceability of API usage and permissions.

• You simplify credential rotation as part of regular security hygiene.

When setting up your integration, ensure this service account has the appropriate role to access the required API endpoints.

How to revoke an API key

1. From the side navigation bar, click your username.
2. Click the Revoke button.
3. Confirm the cancellation by clicking Revoke.