# User Security and Access Controls

Ensuring **secure access management** is crucial for protecting customer data and maintaining system integrity. **WapCRM offers advanced security controls** to prevent unauthorized access, track user activity, and enforce data protection policies.

This section covers **session management, IP logging,  and access restrictions** to help businesses secure their communication channels and prevent data leaks.

***

### **Secure Login & Authentication**

WapCRM enforces **strict login protocols** to ensure only authorized users can access the platform.

✅ **Company Code-Based Authentication** – Users must enter a **Company Code, Username, and Password** to log in.\
✅ **Secure Password Policies** – Enforce strong passwords with **uppercase, lowercase, numbers, and special characters**.

{% hint style="info" %}
**Benefit:** Prevents **unauthorized logins and brute-force attacks** by enforcing **strict authentication rules**.
{% endhint %}

***

### **IP Logging & Access Tracking**

To enhance security, WapCRM **logs and monitors user login activity**, tracking **IP addresses, locations, and device details**.

✅ **IP Logging** – Records **all login IP addresses** to detect unusual access attempts.\
✅ **Login History Monitoring** – Keeps a **detailed log of successful login attempts**.

🔹 **Benefit:** Helps **prevent unauthorized access, detect suspicious logins, and monitor security risks**.

***

### **Session Management & Automatic Logout (Coming Soon)**

To **prevent unauthorized access on inactive sessions**, WapCRM offers **session timeout settings** and automatic logout features.

✅ **Session Timeout** – Logs out inactive users after a defined period of inactivity.\
✅ **Forced Logout for Suspicious Activity** – Automatically logs out users if unusual activity is detected.\
✅ **Multi-Session Management** – Supervisors can **monitor and terminate active sessions** if needed.

🔹 **Benefit:** Reduces the risk of **unauthorized access if a user forgets to log out** or their device is compromised.

***

### **Role-Based & Page-Based Access Control**

WapCRM ensures **users only access the data and features necessary for their role** through role-based and page-based permissions.

✅ **Supervisors:** Full access to **all conversations, reports, and settings**.\
✅ **Agents:** Can only view and respond to **their assigned chats** but cannot access reports or settings.\
✅ **Page-Based Permissions:** Restricts access to **specific pages** based on user roles.

🔹 **Example:**

* **Supervisors** can **view performance reports** and **manage users**, while **Agents cannot**.
* **Phone & email masking** can be enforced for Agents to **prevent customer data exposure**.

🔹 **Benefit:** **Prevents unauthorized data access**, secures customer information, and ensures **efficient role-based workflows**.

***

### **Preventing Data Leaks & Unauthorized Exports**

To protect sensitive business data, WapCRM **restricts data exports and prevents unauthorized access** to customer information.

✅ **Phone & Email Masking** – Prevents users from **seeing full customer contact details** unless authorized.\
✅ **Data Export Restrictions** – Only **Supervisors can export** reports and conversation histories. **(Coming Soon)**\
✅ **Audit Logs & Activity Monitoring** – Tracks all **data exports, downloads, and modifications**.

🔹 **Benefit:** **Prevents data theft, secures customer privacy, and ensures compliance with GDPR/KVKK regulations**.

***

### **Security Best Practices for WapCRM Users**

To maximize security, all WapCRM users should follow these best practices:

🔹 **Use Strong Passwords** – Avoid common passwords and update them regularly.\
🔹 **Monitor Login Activity** – Regularly check login history for suspicious access attempts.\
🔹 **Do Not Share Login Credentials** – Each user should have their own access.\
🔹 **Log Out When Not in Use** – Especially on shared or public computers.

🔹 **Need help?** [Contact WapCRM Support](https://www.wapcrm.net/contact) for security concerns or troubleshooting assistance.

***

### **Why WapCRM’s Security & Access Controls Matter**

✅ **Prevents Unauthorized Logins** – Enforces **strict authentication and IP tracking**.\
✅ **Enhances Data Protection** – **Phone & email masking, data export restrictions, and audit logs**.\
✅ **Monitors User Activity** – Tracks **logins, session history, and suspicious behavior**.\
✅ **Secures Customer Data** – Ensures **compliance with GDPR/KVKK security standards**.

🚀 **Keep your business communications safe with WapCRM’s advanced security controls!**

***

#### **Get Started Today!**

📌 **Set Up Security Controls** → **Monitor User Activity** → **Protect Your Business Data!**


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.wapcrm.net/account-management/user-security-and-access-controls.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.