---
title: Account Protection Action Settings
slug: public-apis/account-protection-action-settings
createdAt: 2026-11-02T15:08:19.897Z
---

::::ExpandableHeading
###

**Topic type: Reference**

:::hint{type="warning"}
**Purpose**: Defines the six settings you enter when you install the Accertify Account Protection Action.

**Audience**: Auth0 tenant administrators.

**Applies to**: The Post Login and Pre User Registration Actions. Both use the same settings.

**Does not apply to**: Integrations with Accertify that are set up outside of Auth0.
:::
::::

Auth0 stores the secret values in the Action's secure store. You don't need to open the Action's code editor.

## Accertify Connection

:::ExpandableHeading
### AP\_USERNAME

**Type**: Secret Text

Your Accertify Account Protection API username.
:::

***

:::ExpandableHeading
### AP\_PASSWORD

**Type**: Secret Text

Your Accertify Account Protection API password.
:::

***

:::::ExpandableHeading
### AP\_ALLOWED\_HOST

**Type**: Secret Hostname

Your assigned Accertify API host. The Action only sends credentials and login data to this host.

::::hint{type="success"}
****<font color="#4f6228">**Example**</font>:

:::BlockQuote
adi.accertify.net
:::
::::
:::::

***

:::::ExpandableHeading
### AP\_BASE\_URL

**Type**: HTTPS URL

The Accertify API base URL, including the `/api` path. It must use HTTPS, and its hostname must exactly match `AP_ALLOWED_HOST`.

::::hint{type="success"}
****<font color="#4f6228">**Example**</font>:

:::BlockQuote
[https://adi.accertify.net/api](https://adi.accertify.net/api)
:::
::::
:::::

***

## Behavior

:::ExpandableHeading
### AP\_TIMEOUT\_MS

**Type**: Number

How long to wait for Accertify, in milliseconds. Defaults to `1500`.
:::

***

:::ExpandableHeading
### FAIL\_OPEN

**Type**: True / false

What happens if Accertify can't be reached. Defaults to `true`.

- `true` (default): if Accertify is unreachable or returns an error, logins and sign-ups continue normally. An Accertify outage never locks your customers out.
- `false`: every login and sign-up is blocked for as long as Accertify is unreachable. Choose this only if you want an Accertify outage to also stop logins and sign-ups, and agree it with your security and engineering teams first.

Accertify recommends keeping `FAIL_OPEN` set to `true`. Account Protection screens login and account creation attempts for risk. An Accertify outage is unlikely, but if one happens, failing open lets your customers keep logging in while screening is unavailable.

A configuration problem always fails open, whatever this setting is. For details, see [Troubleshooting Account Protection for Auth0](docId\:Dg8HEqC5LQhQrnuDsTOME).
:::



***

**See also**:

::::LinkArray{contentSource="CUSTOM"}
:::LinkArrayItem
[Installing the Accertify Account Protection Action](docId\:AHZKMD0Dk4OD4An5yy4Nx)
:::

:::LinkArrayItem
[Adding the Account Protection Action to the Login Flow](docId:2TrDSB4TyeOy2MxqhkIOG)
:::

:::LinkArrayItem
[Account Protection Recommendations in Auth0](docId\:v0lnnu9s6yJFlhDN_HQ5M)
:::
::::