Security settings
Password policy, session timeout, login lockout, IP allow/block lists, 2FA requirement and login alerts. For network admins.
Rules for signing in to the platform: how long sessions last, how many failed attempts lock an account, which IPs may sign in, whether admins must use two-factor authentication, and who is alerted about admin logins.
Fields and settings
| Field | What it does |
|---|---|
| Session timeout (minutes) | Signs people out this many minutes after they signed in, whether or not they're active. 0 keeps the default: sessions last at most 12 hours. |
| IP allowlist / blocklist | If the allowlist has entries, only those IPs can sign in or sign up. Blocklisted IPs are always refused, even if allowlisted. Limits: Applies to login and signup, not to tracking traffic. |
| Two-factor requirement | Requires every admin to enrol in 2FA. Admins who haven't are prompted on their next sign-in; nobody is locked out. Set up your own under My Profile → Security. |
| Suspicious activity alert | Saved only. Limits: No suspicious-activity emails are sent yet. Admin login alert does work. |
Limitations
- Restricted: Be careful with the IP allowlist — an entry that doesn't include your own IP stops you signing in from elsewhere.
Related
Was this article helpful?
Thanks for the feedback. Tell us more