Configure Security Settings in Your Wingify Account

Overview

Web applications contain resources that can be accessed by many users. To protect resources from unprotected access over the Internet, Wingify provides various security measures. To configure the security settings:

1. Navigate to the Profile menu in the top-right corner and select Settings.
2. Go to Account > Security.

Wingify typically provides security in the following ways:

Login and Access

In Wingify, you have the following options to manage the login and access of your account:

• Allow Wingify team to access your account: Sometimes, the Wingify support team may need access to your account temporarily to resolve issues related to your account. Accessing your account settings helps our support members to diagnose and troubleshoot your issue faster and better. If you do not wish to allow access to the Wingify support team, uncheck this option.
• Expire users’ passwords in 90 days: Enabling this option ensures that all the users reset their Wingify password at least every 90 days. Passwords older than 90 days automatically expire, and the users cannot log in unless they change it. Users are notified over the mail with a link to reset their password before the existing password expires.
• Log users out of Wingify after 15 minutes of inactivity: Enabling this option ensures that all users are logged out of Wingify after 15 minutes of inactivity. Users have to log in again to continue using the app.
• Prevent users from reusing last <> passwords while resetting: Enabling this option allows you to set a numerical limit to restrict users from reusing the previous passwords.
• Prevent users from reusing a password that was used in the last <> days while resetting: Enabling this option allows you to set a periodical limit to restrict users from reusing the previous passwords that were used within the specified number of days.

Alerts

Set email alerts for account administrators (Admins of the main workspace) to receive notifications for your Wingify account-related activities like successful or unsuccessful login attempts, changes made to your Wingify account. You can add multiple users to receive alerts on your account activities.  

Allow Login from Specified IP Addresses and Locations

Use this option to limit the IP addresses or locations that can access your account. This can be done by providing one or multiple IP addresses in the Allow login if IP address matches the following (add IP addresses separated by new line) field or by specifying one or multiple locations in the Allow login if location matches the following field present in Settings > Accounts > Security section of your Wingify account. 

To learn how you can do this in your Wingify account refer to Enable Users to Log in to Wingify From Specified IP Addresses and Locations. 

Support Ticket Access

While adding users to your Wingify account, you can assign them to multiple workspaces as required, along with the corresponding access permissions for them. However, if adding certain users to your Wingify account is not feasible, you can use this option to whitelist the respective email addresses or domains and authorize them for contacting the Wingify support team. Account Owners or Admins can authorize such users by adding them under Settings > Accounts > Security > Support Ticket Access > Whitelisted domains and emails. This action lets you specify which email addresses or domains your organization will use to contact the Wingify support team. It ensures that users added here are whitelisted and can reach out to the Wingify support team for seeking and receiving timely assistance. Wingify requires whitelisting to prevent unauthorized access and ensure account-related information is shared only with known and approved contacts of an account. It also helps maintain account security, as support queries from unrecognized or unregistered users are blocked and not entertained.

If you are using an Agency account with multiple linked customer accounts, whitelisting works at a higher level: any user, email address, or domain whitelisted under the parent Agency account is automatically recognized across all its linked accounts. 

This means:

• Agency users do not need to be whitelisted separately on every individual linked account they manage.
• Support requests raised for any linked account, from an email or domain already whitelisted at the Agency level, are automatically treated as valid and authorized.

Extract or Delete Data For a Specific UUID

Wingify saves visitor data against a UUID which is created and saved on the visitor’s browser cookie. UUID are unique IDs that identify your website visitors and are different for each browser. 

To Access/Delete the data, provide the value in the UUID field present in Settings > Accounts > Security.

For more information, refer to How to locate UUID.

Single Sign-on

Single Sign-on (SSO) is an authentication process that allows a user to access multiple applications with one set of sign-in credentials. To know more about SSO, refer to Single Sign-on in Wingify.

SmartCode Security

SmartCode Security is a security mechanism that prevents unauthorized use of your Wingify SmartCode. When enabled, Wingify allows data collection only from domains registered in your Wingify account and automatically blocks all other data collection requests from unregistered domains. Scroll down to the SmartCode Security section, check the Restrict SmartCode usage to registered websites and apps checkbox, and click Save. You can disable SmartCode Security by clearing the Restrict SmartCode usage to registered websites and apps checkbox and clicking Save to save the changes.  

Control Wingify Execution

Wingify provides a security and troubleshooting feature that allows you to temporarily stop the execution of the Wingify SmartCode on your website. This functionality is particularly useful for enterprise organizations where adding or removing code snippets requires extensive internal approvals and coordination across multiple teams. By using the Control Wingify execution feature, you can simulate the removal of the Wingify SmartCode without actually touching your website's codebase. This allows your technical teams to quickly debug issues, such as page flickering or unexpected layout changes, and determine whether they are caused by Wingify or another third-party script. For example, if a site administrator notices a sudden performance dip, they can stop Wingify execution. If the issue persists even after stopping Wingify execution, the team knows the root cause lies elsewhere, saving hours of unnecessary code deployments and rollbacks. 

Stop Wingify Execution

Stopping Wingify execution immediately halts all Wingify activity in the specific workspace on your site. To stop the Wingify execution:

1. Navigate to the Control Wingify execution section at the bottom of the page.
2. Click Stop execution. 
3. In the confirmation dialog, review the impact and click Stop execution again.

Resume Wingify Execution

Once the underlying issues have been investigated or resolved, you can resume the Wingify execution using two different methods:

Method 1: From Security Settings

1. Go to Profile menu > Settings > Security.
2. In the Control Wingify execution section, click Resume execution.

Method 2: By Starting a Draft or Paused Campaign

Wingify automatically prompts you to resume execution if you attempt to launch a new or paused campaign while execution is stopped. To resume Wingify execution:

1. Navigate to any Wingify campaign, for example, an A/B test campaign.
2. Select a Draft or Paused campaign.
3. Click Start Campaign.
4. In the confirmation dialog, click Resume execution and start campaign.

Once you resume Wingify execution, data collection for all the campaigns in a workspace resumes, and visitors start experiencing personalized campaigns.

Need more help?

For further assistance and more information, contact Wingify Support.