Security Settings Overview

93 Aufrufe Markdown

The Security screen brings together every protection layer for your admin panel and client accounts in one set of tabs, from login rules and verification methods to bot, spam and backup defenses.

Opening the Screen

In the left menu, click Settings, then Security.

Address: {admin}/settings/security

What Is on the Screen

The screen opens with a row of tabs across the top. Which ones you can use depends on your permissions (see Required Privileges below). The screen opens on the Settings tab by default.

Settings
Admin panel address, cookie scope, trusted proxies, iframe protection and client password rules. General Security Options
Authentication
Two-factor authentication, location verification, IP/proxy verification and passwordless JetPass sign-in. Authentication Security
BotShield
Asks for a captcha only from a visitor who keeps retrying the same form. BotShield
Captcha Security
Chooses the captcha provider and which forms show a captcha to every visitor. Captcha Security
Process Restriction
Sets a minimum wait time between repeated actions, such as sign-in attempts. Process Restriction
Spam Protection
Screens guest forms and incoming email against known spam sources. Spam Protection
Prohibited List
Blocks sign-ups and purchases using a banned domain, email, phone number or word, and lists manually blocked IP addresses. Prohibited List
Backup
Configures the backup system, remote storage destinations and restores. Backup and Restore

Things to Watch

Some tabs may not appear

If your account only covers part of the Security permissions, the tabs it does not cover are left out of the row.

BotShield and Captcha Security work together

A form set to Always in Captcha Security shows a captcha to every visitor, so BotShield's threshold never gets a chance to trigger there. Leave a form Adaptive to let BotShield decide.

Required Privileges

The Settings, Authentication, BotShield, Captcha Security and Process Restriction tabs need the SECURITY_SETTINGS privilege. The Backup tab needs its own SECURITY_BACKUP privilege. The Spam Protection and Prohibited List tabs need neither privilege beyond opening this screen, so a staff account holding only SECURITY_BACKUP still sees both of them.

War das hilfreich?

Vielen Dank für Ihre Rückmeldung!

Brauchen Sie weitere Hilfe?

Unser Support-Team ist rund um die Uhr für Sie da, wenn Sie oben nicht fündig werden.