Webinterface Security

We are implementing CommitCRM at the moment and I was told by our web admin to make sure password lockout was enabled and to check on 2FA. From the forums I see there is essentially no protection beyond simple password for the web interface. Is this true? I can't find anything in the Documentation. I did find this on the forums:

>May 8th, 2017, 11:59 PM
>CommitCRM Support Posts: 6,868
>2FA is coming!
>
>True, for secure connections use IIS as the Web server for CommitCRM together with SSL >certificates.

>Hope this helps.
Source: this thread


What are others doing to protect their customer's data?

Thank you for posting.

2FA should be enabled under Tools > Options > Web Interface tab in RangerMSP. Scroll down to see it, the restart the Web interface service, or IIS (if used).

Click for a detailed guide regarding two factor authentication.

Hope this helps.

Awesome! Not sure how I missed this. I really did search.

Thanks, again, for the quick responses.

Because the forum search is *bad* cough, cough.

Easier to start a new threat, which is very time consuming...

Instead of using the built-in forum search, you can use the Google-based search on our website that also shows results from the forum and wiki.

Hope this helps.