Learn how Kommo’s security settings help protect your login, team access, and workspace data.
What you’ll need:
Any Kommo plan to use Profile security settings, Mandatory two-step verification, and Country-based workspace access.
An Advanced, Pro, or Enterprise plan to use the IP whitelist and Authorization log.
A Pro or Enterprise plan to use Activity limits and scheduled Backups.
Admin access to manage workspace security settings.
Access to the email address linked to your profile to receive verification codes and password reset emails.
Keep in mind:
Some actions require you to confirm your identity before you can continue.
Before restricting workspace access, make sure your team can still sign in from the locations and networks they use.
Kommo’s Security section brings all security settings together in one place. It has two pages:
Profile security helps you keep your login secure, set up extra verification, and sign out of old or unfamiliar devices.
Workspace security helps Admins manage how the team accesses Kommo, review security activity, and keep workspace data safe.
Each page also shows a Security score and recommendations to help you review your settings.
This article explains which settings are available on each page, when to use them, and where to find detailed setup instructions.
Note: Available security settings vary by Kommo plan.
Use cases
Keep your login safe – Add an extra sign-in check and sign out of devices you no longer use or recognize.
Manage your team’s access – Require an extra sign-in check for everyone and choose which networks and countries they can sign in from.
Review security activity – Check who signed in to your workspace and look into activity you don’t recognize.
Protect your business data – Limit how much data users can view and save backup copies regularly.
Check how well your profile and workspace are protected
The Security score helps you see which security settings you could improve. Profile security and Workspace security each show a score of Low, Medium, or High, with suggestions for what to change.
Learn more in Manage your profile security in Kommo and Manage workspace security in Kommo.
Protect your personal access
Use Profile security to protect your sign-in details and manage the devices where you’re logged in.
Add an extra sign-in check
Two-step verification adds a check after you enter your password. You confirm your login with a code from your email or an authenticator app, helping keep your profile safe even if someone knows your password.
Learn more in Set up two-step verification in Kommo.
Sign in without a password
Passkeys let you sign in without typing a password. Instead, you confirm your identity on your device using a fingerprint, face recognition, screen lock, or another supported method.
Learn more in Set up and use passkeys in Kommo.
Keep your sign-in details up to date
The Sign-in details section lets you change your email address and password. An up-to-date email address helps you receive verification codes and password reset emails. You can also change your password if you think someone else knows it or you want to replace it with a stronger one.
Learn more in Reset your password in Kommo.
Sign out of old or unfamiliar devices
The Sessions section shows where your profile is signed in. Details such as the browser or app, last login time, region, and IP address help you spot sessions you don’t recognize.
You can sign out of a session remotely, which is useful if you lose a device or forget to sign out of a shared computer.
Learn more in Manage your profile security in Kommo.
Protect your team’s access and data
Use Workspace security to set team-wide requirements, restrict access, review activity, and keep copies of your data.
Require two-step verification for everyone
Mandatory two-step verification makes an extra sign-in check a requirement for everyone in your workspace. This helps ensure everyone in your workspace uses an extra sign-in check.
Learn more in Manage security with two-step verification in Kommo.
Restrict access to trusted networks
The IP whitelist lets your team access Kommo only from approved networks, such as your office network. Connections from other IP addresses are blocked, even if someone has the correct email and password.
Learn more in Manage workspace security in Kommo.
Allow access from selected countries
Country-based workspace access lets you choose which countries your team can sign in from and blocks sign-ins from other countries. You can change the allowed countries when someone travels or moves.
Learn more in Set up country-based workspace access in Kommo.
Review sign-ins and security activity
The Authorization log shows sign-ins and security-related actions, including API requests, data exports, and changes to backup settings. You can filter events by date, type, or user to check unfamiliar access or find out what happened.
Learn more in Manage workspace security in Kommo.
Limit how much data users can view
Activity limits let you set how many cards or list items users can view within a selected period. If someone exceeds a limit, Kommo deactivates them, blocks their workspace access, and sends a notification.
Learn more in Manage workspace security in Kommo.
Keep copies of your workspace data
Backups let you keep saved copies of your workspace data. You can schedule regular backups or request an extra copy when needed.
Learn more in Back up and restore your data.