In this article:
Keycafe uses a number of protocols to ensure your data is protected. For information on the security measures that Keycafe implements visit our Security page. The security settings mentioned in this article affect all users within your organization.
A Note About Security and Key Management
While Keycafe takes steps to secure its software and hardware platforms, key management depends on customers to use the service properly, minimize error, and maintain vigilance. Nonetheless, it comes with risks. Keycafe SmartBoxes are not designed for maximum physical security. SmartBoxes in some rare cases have been targeted and thus should always be kept in a secure and monitored environment. Any keys you drop off should never be labeled with identifying address information. Even if you meet all of our recommended security guidelines, there are nonetheless inherent risks and those who will target the Keycafe service. Please see the Keycafe Terms for more information.
User Key Pickups 2FA
This setting allows you to enforce an extra layer of security during the pickup of keys within your organization. By enabling this feature, when a key pickup is attempted using a QR code, access code, or phone number, a two-factor authentication code must be inputted into the SmartBox to complete the pickup. This 2FA code is sent via SMS by default.
Alternatively, you can select 4 Digit PINs which will allow users to set a constant personal identification number they can enter instead of receiving a new code each time via SMS.
Note that this setting does not apply to key pickups done using a user badge, booking code, URL link, or Keycafe's iOS and Android applications which already have additional authentication layers.
Require Handshake for Field Swap
This setting requires users to verify field swaps by entering a code that is sent to the new keyholder and entered by the current keyholder. Organization Admins are exempt from this requirement. See Field Swaps for more details.