Security

Security

SmartWMS provides comprehensive security features to protect your data.

Authentication

Password Authentication:

• Strong password requirements
• Account lockout after failures
• Password expiry policies
• Password history

Two-Factor Authentication (2FA):

• Go to Profile → Security
• Enable 2FA
• Scan QR code with authenticator app
• Enter verification code
• Save backup codes

Session Management

Session Settings:

• Session timeout: 30 minutes default
• Concurrent sessions: Configurable
• Force logout: Admin capability

View Active Sessions:

• Go to Profile → Sessions
• See all active sessions
• Terminate unwanted sessions

IP Restrictions

Limit access by IP address:

• Go to Settings → Security
• Enable IP whitelist
• Add allowed IP addresses
• Save

API Security

API Key Best Practices:

• Use separate keys per integration
• Set minimum required scopes
• Rotate keys periodically
• Monitor API usage

IP Whitelist for API:

• Go to Configuration → API Keys
• Open key
• Add allowed IPs
• Save

Data Encryption

In Transit:

• TLS 1.2+ required
• HTTPS only
• Certificate validation

At Rest:

• AES-256 encryption
• Encrypted backups
• Secure key management

Audit Logging

All actions are logged:

• User login/logout
• Data changes
• Configuration changes
• API access

View in Monitoring → Activity Log.

Compliance

SmartWMS supports:

Security Checklist

For Admins:

• [ ] Enable 2FA for all admins
• [ ] Set strong password policies
• [ ] Configure IP restrictions
• [ ] Review user access quarterly
• [ ] Monitor audit logs
• [ ] Keep integrations updated

For Users:

• [ ] Use strong, unique password
• [ ] Enable 2FA
• [ ] Don't share credentials
• [ ] Log out when finished
• [ ] Report suspicious activity