Choosing Signer Security: No Security, Email OTP, or Access Code

Every signer row carries a security dropdown, and the right choice depends on one question: how bad would it be if the wrong person signed? 

The Options 

1.  No security — the emailed link opens the document directly. Right for routine internal documents where the mailbox is trusted. 

2.  Email OTP — a one-time code goes to the signer's email; they enter it before viewing. Blocks forwarded links: whoever signs must control the mailbox right now. Available on Standard and above. 

3.  Access Code — you set a code and share it via a different channel (call, SMS). The email alone is no longer enough. The strongest option for high-stakes or external signatures. 

Setting It Up 

Open the dropdown on each signer's row and pick. For Access Code, type the code, click save (it masks like a password), then share it with the signer — never in the same email thread. 

A Simple Policy That Works 

•  Internal routine docs → No security. 

•  External signers → Email OTP. 

•  Contracts above a value threshold, or anything sensitive → Access Code. 

Whatever you pick, the method and outcome are recorded in the audit trail — evidence you'll be glad to have.