Home
New To Everflow
Account Setup
How To Best Utilize Security Settings
How To Best Utilize Security Settings

SERIES:

How To Best Utilize Security Settings

Learn how to use Everflow's security tools to protect your platform through API management, access monitoring, and authentication controls.

Overview

Everflow's security features help protect your business data while keeping work efficient.

Find all security tools in Control Center -> Security, where you can manage API keys, control access, and monitor system usage.
You need "Security" permission to access these features. Ask a Super User if you need access.

Security Management Tools

API Key Controls

Location: Control Center -> Security -> API Keys tab

View Your API Keys

See all your network's API keys, including:

  • Names and permissions
  • Who uses each key
  • Usage data
  • When keys were created or changed

Create New Keys

Click + API Key Add required details: Key name Who will use it What it can access
Heads Up! Copy your key right after creating it - you can't see it again later.
  • Keys are stored in hashed format
  • Cannot be retrieved later
  • Not accessible by Everflow staff

Managing Existing Keys

Revocation: Click -> Revoke Revocation is permanent Cannot be re-enabled Filtering: Toggle between active/revoked keys Search by name or employee Use Columns Customization to toggle on/off needed column

IP Whitelist Protection

A common strategy for mitigating fraudulent or other unwelcome activity on your offers is by limiting the API addresses you'll accept calls from.

API Whitelists allow you to block API calls from unknown IP addresses, and only allow calls from those IPs that you specify.

Heads Up! If you do not have any entries in your API Whitelist, then API calls from all IPs are accepted. If you have one entry or more, only calls from the IPs in the list are accepted.

Managing Whitelists

Location: Control Center -> Security -> API Whitelist tab
Click Edit to modify Add trusted IP addresses Save changes to enforce

Login Monitoring

Access History

Location: Control Center -> Security -> Logins tab

Track platform access, including:

  • When people log in
  • Which devices they use
  • Where they connect from
  • Browser information

Customizing Views

  • Use date range filters
  • Filter by Employee
  • Customize column display
  • Search specific users

Multi-Factor Authentication (MFA)

Location: Control Center -> Security -> Multi-Factor Authentication tab

Add extra login security using:

  • Google Authenticator
  • SMS verification
  • Or both methods

Implementation

Edit General settings Select authentication method Monitor setup status in Employee Settings Track completion status

Quick Security Tasks

Task Location Key Notes Create API Key API Keys tab Save key immediately Manage Whitelist API Whitelist tab Empty list = all IPs allowed View Logins Logins tab Filter to find specific users Configure MFA MFA tab Choose verification method

Best Practices

Maintaining robust security within your Everflow platform requires consistent attention to a few key areas.

Establish a regular schedule for rotating your API keys - this simple practice significantly reduces the risk of unauthorized access through compromised credentials. While changing keys, take the opportunity to review which applications and integrations truly need access, removing any that are no longer necessary.

Make login history review part of your regular security routine. By examining this data periodically, you can quickly identify unusual access patterns or suspicious activities before they become serious security issues.

Implementing Multi-Factor Authentication for all users creates an essential additional security layer that protects your account even if passwords become compromised. Complete your security strategy with monthly reviews of your IP whitelist configuration - as your business relationships and technical infrastructure evolve, so should your access controls.

These proactive security measures, when implemented consistently, create a strong defense system that protects your valuable marketing data while maintaining operational efficiency.

Quick Reminder Keep checking and updating your security settings to maintain strong protection.