Security settings

Available in Classic and VPC

NAVER Cloud Platform provides additional security settings such as two-factor authentication and API authentication keys for its members' personal information protection and safe service use.

Two-factor authentication settings

When logging in to NAVER Cloud Platform, you can enter your ID and password and undergo a two-factor authentication to complete the login. Two-factor authentication is not a required item, but we recommend you setting two-factor authentication, which is an extra layer of security, to protect your account information. You can set it as follows.

1. Access to the NAVER Cloud Platform portal.
2. Click Login at the upper right of the NAVER Cloud Platform portal.
3. When the login screen appears, enter your ID and password, then click the [Log in] button.
4. Click the My Page menu at the top center and then the Manage account menu.
5. Enter the current password one more time to protect your information, then click the [OK] button.
6. On the page to manage accounts, select the [Manage two-factor authentication] tab menu.
7. Click the [Set with authentication number] button for two-factor authentication based on the authentication number, and then click the [Set with OTP] button for two-factor authentication based on OTP.

• Set with authentication number: Perform two-factor authentication by entering the authentication number sent to the registered mobile phone number or email address
• Set with OTP: Perform two-factor authentication by entering one time password in connection with Google OTP app

8. On the two-factor authentication setting page, set the required items and click the [OK] button.

Note

If you can't log in due to losing and changing your phone or deleting your email account after setting the two-factor authentication, please contact Support.

---

Authentication key management

NAVER Cloud Platform allows you to control various features of services provided with APIs. You can register, edit, delete, and search data after entering action-specific parameters. You can also utilize them to run services and automate operation tools. These APIs are issued to each member by setting the API authentication key, which is a user identification tool, as a pair of access key and secret key so that only users with permissions can call them. Therefore, if the API authentication key is leaked to a third party, they can arbitrarily alter or search resources which may cause serious security problems.
Therefore, we recommend you to have the API authentication key issued from a sub account, not your main account with all permissions, and periodically replacing it to prevent leakage. We recommend you to have the issued authentication key suspended or deleted for security if you don't use API authentication key, or it is suspected to be stolen.
You can create, suspend, or delete an API authentication key to minimize security threats as follows.

1. Access the NAVER Cloud Platform portal.
2. Click Login at the upper right of the NAVER Cloud Platform portal.
3. When the login screen appears, enter your ID and password, then click the [Log in] button.
4. Click the My Page menu at the top center and then the Manage account menu.
5. Enter the current password one more time to protect your information, then click the [OK] button.
6. On the page to manage accounts, click the [Manage authentication keys] tab menu.
7. Click [Create new API authentication key] to issue an API authentication key.
8. Click the [View] button of the Secret key to check the issued authentication key.
9. Click the [Disable] button in the management menu to disable the issued authentication key.
10. Click [Enable] in the management menu to use the disabled authentication key again, and then click [Delete] to delete it.

Note

If you created a new API authentication key, then apply the changed API authentication key to normally use the service you were using.