Security

Sign-in is email and password only. There’s no social login, no magic link and no in-app two-factor authentication.

Password rules

At least 10 characters, including at least one letter and at least one number. The same rules apply at signup, at reset and at any change.

Length beats complexity. A passphrase of three or four unrelated words clears the rules comfortably and is easier to remember than a short string of symbols.

If you’ve forgotten it

Use Forgot password? on the sign-in screen (/auth/forgot-password). You’ll get a reset link by email.

Reset links expire. If yours has, request another rather than trying to reuse it. If none arrive at all, check spam first, then contact support.

Two-factor authentication

Not available on customer accounts today.

Since a password is the only thing between someone and your account, that puts more weight on it than we’d like: use a password unique to DynaCargo, and don’t reuse one from an email or banking account.

Administrators are different. The internal admin panel sits behind Cloudflare Access, entirely separate from the app’s own login, and multi-factor authentication there is enforced by the Access policy rather than by anything in DynaCargo.

Confirming your email

New accounts must confirm their email before posting or bidding. That confirmation is also what proves the address is reachable if you ever need a password reset — so don’t leave it unconfirmed.

Who can see what

Access is enforced in the database itself, not just in the interface. Your bookings, trips, invoices and analytics resolve to you or your company, so a link you’re not a party to won’t open even if someone sends it to you.

Public by design: the marketplace, company profiles, and any /track/{token} or /verify/{token} link you choose to share. Those links need no login, so treat sharing one as making it public.

If you think your account is compromised

Change your password immediately — that’s the fastest thing you control — and then contact support.