Security 1.0
Configure lock period settings
Pre-requisites Org owner Org admin To access and impose lock period settings Log in to Zoho One , then click Admin Panel. Go to Security from the left menu. Click open a security policy. If there isn't one added, learn how to add a security policy ...
Lock period settings - Overview
Lock period settings are primarily meant for restricting unauthorized access to an account. By enforcing a timed lock-out when the sign-in attempts get used up by incorrect credentials multiple times, these settings serve as a secure measure against ...
Configure session management
A web session refers to an authenticated instance of your Zoho One account. Put simply, a web session is created every time you sign in to your account from a browser or device, and is closed when you sign out. Signing in from your laptop is ...
Reorder policy priority
Because multiple policies can be added to a group, policy priority plays an important part in deciding which policies will be applied to a user. Let's look at an example to understand policy priority. The group "Weekend Shift" has four members: ...
Delete a security policy
When a security policy is deleted, the priorities of the remaining policies will be reordered and applied accordingly. Learn more about policy priority. In the mobile application: For iOS devices: Open the Zoho One app on your mobile device. Tap in ...
Deactivate a security policy
When a security policy is deactivated, the priorities of the remaining policies will be reordered and applied accordingly. Learn more about policy priority. In the mobile application: For iOS devices: Open the Zoho One app on your mobile device. Tap ...
Manage security policies for users
Note: While performing sensitive actions, admins will need to periodically re-authenticate. Apply a security policy for a single user Sign in to Zoho One , then click Directory in the left menu. Go to Users, then click on a user. Click Security ...
Apply an existing security policy to new groups
When applying a policy to a new group, remember to take the policies already applied to the group into account. When a group has multiple security policies, they will be applied based on the policy priority. In the mobile application: For iOS ...
Configure allowed IPs
Whitelisting IP addresses prevents unauthorized access and strengthens your organization's security. Once this is configured, you will only be able to access your organization from the allowed IP addresses. In the mobile application: For iOS devices: ...
Configure MFA
Multi-factor authentication (MFA) adds an additional layer of security to your organization. When MFA is enabled, your users will have to verify their identity not only with their password, but also with a second factor. The second factor could be an ...
Configure password policy
Passwords are the most commonly used authentication factor. Many users reuse the same, insecure password for all their online accounts, compromising their organization's security. To protect yourself from this common pitfall, make it mandatory for ...
Add security policy
In the mobile application: For iOS devices: Open the Zoho One app on your mobile device. Then tap in the bottom-right corner, then tap Security Policies. Tap Add, then enter the Policy Name. Under Enforced Groups, choose the groups the policy will be ...
Security Policies - Overview
Security Policies provide you with a customizable password policy and advanced settings. Enforce users to create a strong and secure password with password policy. The user's concurrent sessions and lock period setting can be configured with the ...