Users, roles & 2FA
Use your own portal login and authentication codes. Your onboarding contact confirms the business and access assigned to that login. Do not share a primary business login with other people.
Portal access
The initial onboarding flow uses a primary login for the business. Contact XDC Tech when another person needs access. API membership does not automatically grant shared access to every part of the business dashboard, and it does not give a client platform-wide administration rights.
Two-factor authentication
Complete the second-factor step shown after entering your password. Depending on your enrollment, this can use an authenticator, an emailed code, or an unused recovery code. Keep recovery codes private; each can be used only once.
XDC Tech will never ask for your password or one-time code. If an email code does not arrive, check spam and contact support if delivery continues to fail.
API permissions are separate
An authorized client administrator manages keys for a specific business through an explicit API membership. The primary login can create different keys for different integrations; adding API keys does not require creating additional portal users.
Every key includes read access. Payment permission authorizes supported payment operations; resource-management permission separately covers wallets, recipients and related configuration. Some operations require both write permissions. A successful read request does not establish permission to submit payments.