Protect your login, update your sign-in details, and sign out of old or unfamiliar devices.
What you’ll need:
A Kommo account on any plan.
Access to the email address linked to your profile.
An authenticator app if you want to use it for two-step verification.
A supported device, browser, password manager, or security key if you want to add a passkey.
Keep in mind:
Some changes require you to confirm your identity before you can continue.
Changing your password signs you out of all devices, websites, and apps where you’re logged in with the current password.
Profile security brings your personal security settings together in one place. This article shows how to check your protection, set up verification methods, update your sign-in details, and sign out of devices you no longer use or recognize.
To learn how Kommo helps protect your profile and workspace, see Security settings in Kommo overview.
Check your Security score
Your Security score helps you review your profile security and see what you can improve.
View your score and recommendations
Go to Settings → Security → Profile security.
Find the Security score section. Your score can be Low, Medium, or High.
Review Kommo’s recommendations. These may include changing your password, setting up two-step verification, switching to an authenticator app, or adding a passkey.
Make recommended changes
To follow a recommendation, click the button below it:
Set up to turn on two-step verification.
Change method to switch your two-step verification method.
Add a passkey to set up a passkey.
Change password to update your password.
The relevant settings will open so you can make the change. Afterward, return to the Security score section to review your updated score.
Protect your login with two-step verification
Two-step verification adds an extra check when you sign in. After entering your password, you confirm your login with a code from your email or an authenticator app. This helps protect your profile even if someone knows your password.
In Profile security, find the 2-step verification section.
Turn on the Authenticator app or Email toggle.
Follow the on-screen instructions to complete setup.
Save your backup codes somewhere secure so you can sign in if you lose access to your verification method.
For detailed instructions, see Set up two-step verification in Kommo.
Sign in without a password using a passkey
A passkey lets you sign in without typing your password. Instead, you confirm your identity using a method supported by your device, such as a fingerprint, face recognition, or screen lock.
In Profile security, find the Passkey section.
Click Add passkey.
Confirm your identity if prompted, then follow the instructions on your device or in your password manager to finish setup.
You can add multiple passkeys and give them recognizable names.
For detailed instructions, see Set up and use passkeys in Kommo.
Update your sign-in details
Keep your email address up to date so you can receive verification codes and password reset emails. Using a strong password that you don’t use for other services also helps protect your profile.
In Profile security, find the Sign-in details section.
Update your email address or password as needed.
Click Save and complete any verification requested.
For detailed instructions, see Reset your password in Kommo.
Review your sessions and sign out of unfamiliar devices
Sessions show where your profile is signed in. Reviewing them helps you spot unfamiliar access and remove access from old or shared devices.
In Profile security, find the Sessions section.
Review each session’s browser or app, last login time, region, and IP address.
If you don’t recognize a session or no longer use the device, click Logout next to it.
Confirm that you want to log out.
The session ends immediately.
Note: The region shown is based on the session’s IP address. A VPN or another network connection may make it appear different from your actual location.
If you notice suspicious activity, it’s recommended to change your password as well. This signs you out of all devices, websites, and apps where you’re logged in with the current password.