In the Security Settings tab, brokers can configure important security features for the CRM Client Portal. These include:

1. Remote Login Prompts: By enabling remote login prompts in the Security Settings tab, brokers can enhance the security of the CRM Client Portal. This feature alerts clients whenever their account is accessed from a different IP address than usual. It serves as a proactive measure to notify clients of potential unauthorized access to their account. Prompting clients with these alerts allows them to take immediate action if they suspect any suspicious activity and helps ensure the safety of their account.

2. Password Strength Settings: In the Security Settings tab, brokers can configure the password strength requirements for their clients. This feature allows brokers to define specific criteria for creating strong passwords. By implementing strong password policies, brokers enhance the overall security of client accounts, making them less susceptible to password-related breaches or unauthorized access attempts.

3. Two-Factor Authentication Settings: Brokers are empowered to further fortify the security of the CRM by configuring mandatory Two-Factor Authentication (2FA). This advanced security measure adds an extra layer of protection to clients account by requiring clients to key in the 2FA code before performing any actions. This helps to reduce the risk of unauthorized access, even if account passwords are compromised.

Setup Password Strength Settings

To set password strength settings for your clients, follow these steps:

1. Click on the "Edit" icon in the Security Settings tab.
2. Select your preferred Password Strength Settings.

3. Click "Save" to apply the changes.

Application

1. When clients register a new account and proceed to set up their password, they are required to adhere to the password strength settings that have been selected by the broker.

3. When clients update their account password, they are required to follow the password security settings as well.

You can require clients to activate Two-Factor Authentication (2FA) for enhanced account protection. By default, this function is disabled. Once enabled, you can select the operations that will require clients to input a 2FA code:

1. Login

2. Deposit

3. Withdraw

4. Transfer

5. Prop Challenge Fee Payment

6. Trading Competition Fee Payment

7. Change Password

8. Update Email

1. Setting Up Mandatory 2FA

To set up Mandatory 2FA Verification for your clients, follow these steps:

2. Application: Clients Without Existing 2FA Setup

1. For clients without any existing 2FA setup, they will be prompted to activate 2FA upon logging in to the CRM Client Portal.
2. To complete the activation process, clients will need to follow the provided steps, input the 2FA code, and then click "Submit."

3. Once 2FA has been setup, the client will be logged into their CRM account.

4. Clients will not have the option to disable 2FA via the "Settings" page.
5. Clients will be asked to enter a 2FA One-Time Password (OTP) when conducting the operations configured to require mandatory 2FA verification.

Application: Clients with Existing 2FA Setup

1. For clients who have already set up 2FA, their accounts will remain unchanged.

2. They will continue to use 2FA as usual when logging in and when performing any of the operations that require mandatory 2FA.

You can define limits on failed login attempts for both clients and admins, triggering automatic account suspension after repeated failures to mitigate security risks.

1. Setting Up Failed Login Attempt Limit

To setup failed login attempt limit, follow these steps:

2. Application

1. When your client or admin user's login attempt has failed, they will see a notification to inform them of the remaining number of attempts remaining.

2. If the failed login attempt reaches the maximum limit configured, a notification will be displayed to inform the client or admin user that their account has been suspended.

3. To enable the account, you will need to do the following:

   1. For client accounts, locate the account under the "Clients" list and click the "Unsuspend" icon.
   2. For user accounts, under "User Management", click the "Filter" icon and select "Suspended" as the Account Status. You will see a list of suspended users. Locate the user you wish to enable and click the "Unsuspend" icon.

Enabling Remote Login Prompts

To enable remote login prompts for the CRM Client Portal, follow these steps:

1. Click on the "Edit" icon in the Security Settings tab.
2. Click on the "Enable" icon to activate this feature.

3. If you wish to disable remote login prompts at any time, click the same icon to deactivate it.

4. Click "Save" to apply the changes.

Application

1. When Prompts for Remote Logins is enabled, the client will be notified if their account is accessed from a different IP address than their previous login.

2. When such a situation occurs, clients will receive prompts through the following methods:

   1. Popup Notice on CRM Client Portal: A notification will be displayed to the client immediately upon login, informing them that their account was accessed from a different IP address. This prompt serves as an alert to the client to verify the legitimacy of the login. Clients can click "Change the Password" to protect their account.
   2. Email Notification: In addition to the popup notice, an email will be sent to the client's registered email address. This email serves as an additional means of notification, providing the client with information about the login activity and advising them to take appropriate action if the login was unauthorized.