Security Policies - Overview
Security policies are a set of customizable rules that govern how your users can authenticate themselves. They consist of four components:
- Password policy: This component dictates how strong the users' passwords must be and how often they have to be renewed.
- MFA: This component dictates which multi-factor authentication modes the user can use to sign in.
- Allowed IPs: This component dictates which IP addresses the user can use to sign in. Any sign-in requests from IPs that aren't allowed will be denied.
- Session management: This component dictates how many active sessions a user can have, and for how long.
Security policies in Zoho One are highly customizable as the strictness of the policy should depend on each user's privileges and responsibilities. For example, a Sales Representative might only need a fairly safe password policy, while a Payroll Manager might need a very strong password policy and MFA. A sysadmin with access to the organization's directory will need maximum security, and should probably only be allowed to sign in from an allowed IP.
You can configure multiple security policies and apply them to different groups based on your requirements. To learn more about how security policies are applied when a group has multiple policies, check Policy Priority.
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Configure allowed IPs
Whitelisting IP addresses prevents unauthorized access and strengthens your organization's security. Once this is configured, you will only be able to access your organization from the allowed IP addresses. In the mobile application: For iOS devices: ...Add security policy
In the mobile application: For iOS devices: Open the Zoho One app on your mobile device. Then tap in the bottom-right corner, then tap Security Policies. Tap Add, then enter the Policy Name. Under Enforced Groups, choose the groups the policy will be ...Configure password policy
Passwords are the most commonly used authentication factor. Many users reuse the same, insecure password for all their online accounts, compromising their organization's security. To protect yourself from this common pitfall, make it mandatory for ...Manage security policies for users
Apply a security policy for a single user Sign in to Zoho One , then click Directory in the left menu. Go to Users, then click on a user. Click Security Policies, then either Add User to Policy or Exclude User from Policy. Disable MFA for users Sign ...Delete a security policy
When a security policy is deleted, the priorities of the remaining policies will be reordered and applied accordingly. Learn more about policy priority. In the mobile application: For iOS devices: Open the Zoho One app on your mobile device. Tap in ...
New to Zoho LandingPage?
Zoho LandingPage Resources