# Team & security

> Roles, two-factor sign-in, sessions and the audit log.

Source: https://veldhost.eu/docs/team-security

- [Team roles and what each one can do](https://veldhost.eu/docs/roles-and-permissions.md): The five roles on a veldhost account, exactly what each may do, and how to change a role or hand over ownership.
- [Invite a team member](https://veldhost.eu/docs/team-members.md): Give your developer their own login — never share your password.
- [Set up two-factor sign-in and passkeys](https://veldhost.eu/docs/two-factor-and-passkeys.md): Add an authenticator app or a passkey to your login, keep your recovery codes, and know what to do if you lose your device.
- [Sign out other devices and disconnect apps](https://veldhost.eu/docs/sessions-and-connected-apps.md): See every browser signed in to your login and every AI assistant or app acting for you, and cut off any you don't recognise.
- [Check your audit log](https://veldhost.eu/docs/audit-log.md): Every sign-in and change made with your login, in the portal, over the API or by an AI assistant, and how to export it.
- [Security at veldhost](https://veldhost.eu/docs/security-at-veldhost.md): EU infrastructure, automatic patching, second-region backups, and securing your account.