# Security Settings Overview

https://docs.wisecp.com/es/security-settings-overview

The Security screen brings together every protection layer for your admin panel and client accounts in one set of tabs, from login rules and verification methods to bot, spam and backup defenses.

## Opening the Screen

In the left menu, click **Settings**, then **Security**.

Address: `{admin}/settings/security`

## What Is on the Screen

The screen opens with a row of tabs across the top. Which ones you can use depends on your permissions (see Required Privileges below). The screen opens on the **Settings** tab by default.

- **Settings**: Admin panel address, cookie scope, trusted proxies, iframe protection and client password rules. [General Security Options](https://docs.wisecp.com/en/general-security-options)
- **Authentication**: Two-factor authentication, location verification, IP/proxy verification and passwordless JetPass sign-in. [Authentication Security](https://docs.wisecp.com/en/authentication-security)
- **BotShield**: Asks for a captcha only from a visitor who keeps retrying the same form. [BotShield](https://docs.wisecp.com/en/botshield)
- **Captcha Security**: Chooses the captcha provider and which forms show a captcha to every visitor. [Captcha Security](https://docs.wisecp.com/en/captcha-security)
- **Process Restriction**: Sets a minimum wait time between repeated actions, such as sign-in attempts. [Process Restriction](https://docs.wisecp.com/en/process-restriction)
- **Spam Protection**: Screens guest forms and incoming email against known spam sources. [Spam Protection](https://docs.wisecp.com/en/spam-protection)
- **Prohibited List**: Blocks sign-ups and purchases using a banned domain, email, phone number or word, and lists manually blocked IP addresses. [Prohibited List](https://docs.wisecp.com/en/prohibited-list)
- **Backup**: Configures the backup system, remote storage destinations and restores. [Backup and Restore](https://docs.wisecp.com/en/backup-and-restore)

## Things to Watch

> **Some tabs may not appear**
> 
> If your account only covers part of the Security permissions, the tabs it does not cover are left out of the row.

> **BotShield and Captcha Security work together**
> 
> A form set to Always in Captcha Security shows a captcha to every visitor, so BotShield's threshold never gets a chance to trigger there. Leave a form Adaptive to let BotShield decide.

## Required Privileges

The **Settings**, **Authentication**, **BotShield**, **Captcha Security** and **Process Restriction** tabs need the **SECURITY_SETTINGS** privilege. The **Backup** tab needs its own **SECURITY_BACKUP** privilege. The **Spam Protection** and **Prohibited List** tabs need neither privilege beyond opening this screen, so a staff account holding only **SECURITY_BACKUP** still sees both of them.

## Related Articles

- [General Security Options](https://docs.wisecp.com/en/general-security-options)
- [Authentication Security](https://docs.wisecp.com/en/authentication-security)
- [BotShield](https://docs.wisecp.com/en/botshield)
- [Captcha Security](https://docs.wisecp.com/en/captcha-security)
- [Backup and Restore](https://docs.wisecp.com/en/backup-and-restore)