How to secure your MSP account

Introduction

This guide explains how to keep your NordPass MSP account secure and accessible by following the zero-knowledge principle, setting up a Recovery Code, activating additional MSP Admins, and reviewing member access.

Here’s what to do

Memorize your MSP MasterPassword and keep it safe:

1. The Master Password is your personal decryption key used for accessing encrypted data, both your own and your users.
2. The Master Password cannot be reset or recovered if lost; therefore, make sure to follow all the security steps below.

Generate and save your Recovery Code:

1. Click “Save Code” from the MSP Admin Panel.
2. When your recovery code is shown, save it securely (for example, in cloud storage and/or a physical copy).
3. Click “Yes, I’ve saved it.

Regenerate your Recovery Code after using it:

1. The recovery code is one-time use only. If you have already used it, you will have to generate a new one.
2. Click “My Account” in the bottom-left and select “Reset Recovery Code.”

Activate additional MSP Admins

1. Each MSP Admin has their own Master Password. This ensures account continuity if one admin loses access.
2. Go to the “Members” tab.
3. Select an MSP user by clicking the three dots.
4. Click “Make MSP Admin”.

Review MSP members regularly

1. Remove users who no longer need access to clients’ data.
2. Ensure only the right members have the necessary access.

Additional tips

• NordPass is built on the zero-knowledge principle. If you lose your MSP Master Password, it cannot be recovered.
• Keep your MSP account up to date, secure, and maintain a recovery plan in case the sole account owner loses access.