> ## Documentation Index
> Fetch the complete documentation index at: https://help.pixwel.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> How Pixwel keeps your account and your content secure — two-factor authentication, sign-in, permissions, private assets, and more.

Pixwel security covers two things: protecting **your account** and protecting **your content**.

## Your account

<Columns cols={2}>
  <Card title="Two-factor authentication" icon="shield-check" href="/features/security/two-factor-authentication">
    Add an email verification step to your sign-in — or have it enforced for your whole organization.
  </Card>

  <Card title="Signing in & sessions" icon="right-to-bracket" href="/features/security/signing-in">
    How you sign in, reset a password, and sign out.
  </Card>

  <Card title="API tokens" icon="key" href="/features/preferences/api-tokens">
    Personal access tokens for programmatic access — created, revoked, and scoped to you.
  </Card>

  <Card title="User roles" icon="users" href="/features/user-roles">
    What your account can see and do is governed by your group's permissions.
  </Card>
</Columns>

## Your content

Access to assets and files is controlled at every level:

* **Permissions** — your [group's permissions](/features/user-roles) decide what you can preview, download, share, and order, scoped by studio, territory, language, and usage.
* **Private assets** — assets can be locked to specific [territories](/glossary); only Head Office, the vendor, and the assigned territories see them. See [asset symbols](/guides/getting-started#symbols-on-an-asset).
* **Embargoes** — files can be held until a release date and can't be downloaded until the embargo lifts. See [Downloads](/features/downloads#embargoed-files).
* **Watermarks** — previews are watermarked with the viewer's email, and each studio sets its own [watermark format](/features/admin/studios).
* **Shares** — [shares](/features/shares) grant time-limited, recipient-specific access, and you can only share what your own permissions allow.
* **Secure transfer** — downloads use signed, short-lived links (and Aspera for accelerated transfer).