Web applications contain resources that can be accessed by many users. To protect resources from unprotected access over the Internet, Wingify provides various security measures. To configure the security settings:
- Navigate to the Profile menu in the top-right corner and select Settings.
- Go to Account > Security.
Wingify typically provides security in the following ways:
-
Login and Access In Wingify, you have the following options to manage the login and access of your account:
- Allow Wingify team to access your account Sometimes, the Wingify support team may need access to your account temporarily to resolve issues related to your account. Accessing your account settings helps our support members to diagnose and troubleshoot your issue faster and better. If you do not wish to allow access to the Wingify support team, uncheck this option.
- Expire users’ passwords in 90 days Enabling this option ensures that all the users reset their Wingify password at least every 90 days. Passwords older than 90 days automatically expire, and the users cannot log in unless they change it. Users are notified over the mail with a link to reset their password before the existing password expires.
- Log users out of Wingify after 15 minutes of inactivity Enabling this option ensures that all users are logged out of Wingify after 15 minutes of inactivity. Users have to log in again to continue using the app.
- Prevent users from reusing last <> passwords while resetting Enabling this option allows you to set a numerical limit to restrict users from reusing the previous passwords.
-
Prevent users from reusing a password that was used in the last <> days while resetting Enabling this option allows you to set a periodical limit to restrict users from reusing the previous passwords that were used within the specified number of days.
-
Alerts
Set email alerts for account administrators (Admins of the main workspace) to receive notifications for your Wingify account-related activities like successful or unsuccessful login attempts, changes made to your Wingify account. You can add multiple users to receive alerts on your account activities.
-
Allow login from specified IP addresses and Locations
Use this option to limit the IP addresses or locations that can access your account. This can be done by providing one or multiple IP addresses in the Allow login if IP address matches the following (add IP addresses separated by new line) field or by specifying one or multiple locations in the Allow login if location matches the following field present in Settings > Accounts > Security section of your Wingify account.To learn how you can do this in your Wingify account refer to Enable Users to Log in to Wingify From Specified IP Addresses and Locations.
NOTE: You can use regular expressions to specify IP address patterns. For example, to enable access for all IPs matching the pattern "201.67.99.*", enter the regular expression as "201\.67\.99\..*". To type a range of IP addresses, use regular expressions for IP addresses. To learn how to build a regular expression, refer to How to Build your IP Regular Expression.
-
Support Ticket Access
While adding users to your Wingify account, you can assign them to multiple workspaces as required, along with the corresponding access permissions for them. However, if adding certain users to your Wingify account is not feasible, you can use this option to whitelist the respective email addresses or domains and authorize them for contacting the Wingify support team.
Account Owners or Admins can authorize such users by adding them under Settings > Accounts > Security > Support Ticket Access > Whitelisted domains and emails. This action lets you specify which email addresses or domains your organization will use to contact the Wingify support team. It ensures that users added here are whitelisted and can reach out to the Wingify support team for seeking and receiving timely assistance.
Wingify requires whitelisting to prevent unauthorized access and ensure account-related information is shared only with known and approved contacts of an account. It also helps maintain account security, as support queries from unrecognized or unregistered users are blocked and not entertained. Note: This option applies only to unregistered users, email addresses, and domains that cannot be added to your Wingify account. Registered users do not need to be whitelisted.
-
Extract/Delete Data For a Specific UUID
Wingify saves visitor data against a UUID which is created and saved on the visitor’s browser cookie. UUID are unique IDs that identify your website visitors and are different for each browser. To Access/Delete the data, provide the value in the UUID field present in Settings > Accounts > Security. For more information, refer to How to locate UUID.
NOTE: As soon your Access/Delete request is received by Wingify, the Wingify support team will contact you.
-
Single Sign-on Single Sign-on (SSO) is an authentication process that allows a user to access multiple applications with one set of sign-in credentials. To know more about SSO, refer to Single Sign-on in Wingify.
-
SmartCode Security
SmartCode Security is a security mechanism that prevents unauthorized use of your Wingify SmartCode.
When enabled, Wingify allows data collection only from domains registered in your Wingify account and automatically blocks all other data collection requests from unregistered domains.
Scroll down to the SmartCode Security section, check the Restrict SmartCode usage to registered websites and apps checkbox, and click Save.
You can disable SmartCode Security by clearing the Restrict SmartCode usage to registered websites and apps checkbox and clicking Save to save the changes.
-
Control Wingify Execution
Note: This feature is available with Testing, Insights, Personalize, and Web Rollout across all plans. If this feature does not apply to your account, the option will appear locked. Wingify provides a security and troubleshooting feature that allows you to temporarily stop the execution of the Wingify SmartCode on your website. This functionality is particularly useful for enterprise organizations where adding or removing code snippets requires extensive internal approvals and coordination across multiple teams.
By using the Control Wingify execution feature, you can simulate the removal of the Wingify SmartCode without actually touching your website's codebase. This allows your technical teams to quickly debug issues, such as page flickering or unexpected layout changes, and determine whether they are caused by Wingify or another third-party script.
For example, if a site administrator notices a sudden performance dip, they can stop Wingify execution. If the issue persists even after stopping Wingify execution, the team knows the root cause lies elsewhere, saving hours of unnecessary code deployments and rollbacks. Note: This feature is workspace-specific. If you have multiple workspaces, you must follow the steps in the following sections to manage execution for each workspace independently.
Prerequisites:- You must have an Owner or Admin role. For more information, refer to Roles and Permissions.
Stop Wingify Execution
Stopping Wingify execution immediately halts all Wingify activity in the specific workspace on your site.
To stop the Wingify execution:
- Navigate to the Control Wingify execution section at the bottom of the page.
- Click Stop execution.
-
In the confirmation dialog, review the impact and click Stop execution again.
Attention: When you stop the execution:
- Data collection and visitor tracking stop immediately.
- Changes take effect within seconds.
- Active campaign changes and personalizations are no longer visible to visitors.
- Your SmartCode installation will remain in place.
- All campaigns, configurations, and historical data remain intact.
- You can resume execution at any time.
Resume Wingify Execution
Once the underlying issues have been investigated or resolved, you can resume the Wingify execution using two different methods:
Method 1: From Security Settings
- Go to Profile menu > Settings > Security.
- In the Control Wingify execution section, click Resume execution.
Method 2: By Starting a Draft or Paused Campaign
Wingify automatically prompts you to resume execution if you attempt to launch a new or paused campaign while execution is stopped. To resume Wingify execution:
- Navigate to any Wingify campaign, for example, an A/B test campaign.
- Select a Draft or Paused campaign.
- Click Start Campaign.
- In the confirmation dialog, click Resume execution and start campaign.
Once you resume Wingify execution, data collection for all the campaigns in a workspace resumes, and visitors start experiencing personalized campaigns.
Need more help?
For further assistance and more information, contact Wingify Support.