Manage team security, restrict access, review activity, and create backups of your workspace data.
What you’ll need:
Admin access to manage workspace security settings.
Any Kommo plan to use mandatory two-step verification and country-based workspace access.
An Advanced, Pro, or Enterprise plan to use the IP whitelist.
A Pro or Enterprise plan to use Activity limits and backup options described below.
Trusted static IP addresses if you want to restrict access to approved networks. These are IP addresses that stay the same. Make sure you also know your current IP address.
Keep in mind:
Before restricting access, make sure your team can still sign in from the countries and networks they use.
VPNs may affect access if their IP address or country is outside your allowed list.
Some changes require you to confirm your identity before you can continue.
Workspace security brings your team’s security settings together in one place. This article shows how to check your workspace’s protection, manage where users can sign in, review security activity, limit data viewing, and create backups.
To learn how Kommo helps protect your profile and workspace, see Security settings in Kommo overview.
Check your Security score
Your Security score helps you review your workspace security and see what you can improve.
View your score and recommendations
Go to Settings → Security → Workspace security.
Find the Security score section. Your score can be Low, Medium, or High.
Review Kommo’s recommendations. These may include turning on mandatory two-step verification or country-based workspace access, reminding users to change their passwords, or asking them to add a passkey.
Follow a recommendation
To follow a recommendation, click the button below it:
Set up to open the settings for mandatory two-step verification or country-based workspace access.
Send notifications to remind users to change their passwords or add a passkey.
Password reminders are sent to users who haven’t changed their password for six months or longer. Passkey notifications are sent to users who haven’t added a passkey. Users receive these notifications in their Notification center.
After making changes, return to the Security score section to review your updated score.
Require two-step verification for your team
Make two-step verification mandatory so everyone uses an extra sign-in check to access your workspace. Each user can choose to receive codes by email or use an authenticator app.
Before you begin, enable two-step verification for your own profile.
In Workspace security, find Mandatory 2-step verification.
Turn on the toggle.
Choose how much time users have to set up two-step verification.
Follow the prompts to confirm your identity and save the settings.
Users receive an email asking them to set up two-step verification within the selected period. After that period ends, anyone who hasn’t set it up must do so the next time they sign in.
For more details, see Manage security with two-step verification in Kommo.
Restrict access to trusted IP addresses
The IP whitelist lets you choose which networks your team can use to access Kommo, such as your office network. Anyone connecting from an IP address outside the list will be blocked, even if they enter the correct email and password.
In Workspace security, find Whitelist of IP addresses.
Turn on the toggle.
In Trusted IP addresses, enter the IP addresses your team uses. Include your own so you don’t lose access.
Optional: Select API requests under Filtering access to allow apps and integrations to connect only from these IP addresses.
Click Save.
Note: Selecting API access disables the Kommo mobile app. It may also stop integrations from working if they use IP addresses that change or aren’t on your whitelist.
Check that your whitelist works
Sign out, then sign in from a network on your whitelist. You should be able to sign in.
Try signing in from a network that isn’t on the list. Access should be blocked.
If the whitelist blocks your own access, contact Kommo support for help.
Choose which countries can access your workspace
Allow users to sign in only from the countries you select. Sign-ins from other countries will be blocked.
In Workspace security, find Country-based workspace access.
Turn on the toggle.
Open Allowed countries and select the countries your team works from. Include your current country so you don’t lose access.
Click Save.
Update the list before a teammate travels or moves to another country. If they use a VPN, its location must also be in an allowed country.
If these settings block your own access, contact Kommo support for help.
For more details, see Set up country-based workspace access in Kommo.
Review sign-ins and security activity
The Authorization log helps you spot unfamiliar access and review security-related actions in your workspace. It includes web and mobile sign-ins, API requests, data exports, and changes to backup settings.
In Workspace security, find the Authorization log section.
Click View.
Review the listed events, including their date, type, user, and IP address.
Optional: Click Filter to narrow the results by date, activity type (Web, API, Export, or Backup), or user. Set the options you need, then click Apply.
Click Back to close the log.
Set limits on how much data users can view
Activity limits help protect your workspace data by restricting how many cards or list items users can view within a selected period. If a user exceeds a limit, Kommo deactivates them, blocks their workspace access, and notifies you. You can reactivate the user later in Settings → User management.
To set up activity limits:
In Workspace security, find Activity limits.
Turn on the toggle.
Set how many cards each user can view within a selected period, such as per hour.
Set how many list items each user can view within a selected period.
Click Save.
These limits do not apply to data exports.
For example, you can limit each user to 100 card views per hour. Make sure the limits let your team complete their daily work without being deactivated.
Note: Admins are not restricted by activity limits.
Schedule backups of your workspace data
Backups let your business keep a saved copy of its workspace data. You can schedule them to run regularly or request a backup for today.
To schedule backups:
In Workspace security, find the Backup section.
Select Weekly or Monthly.
Click Save.
To request a backup for today, click Generate backup today in the same section.
For more details, see Back up and restore your data.