Security: two-factor authentication, attachments and allowed domains

Where to find it

Open Settings (the icon at the bottom of the left menu) and choose Security. There are three tabs:

Two-factor authentication (2FA)

Once it’s on, signing in to Solwees takes two steps: your password, then a 6-digit code from an authenticator app on your phone. Even if someone learns your password, they can’t sign in without your phone.

How to turn it on:

1. 1On the Workspace tab, click the Enable 2FA switch.
2. 2Enter your account password and click Continue.
3. 3Scan the QR code with an authenticator app on your phone. If scanning doesn’t work, open “Can’t scan the code?” and type the secret key into the app. Click Next.
4. 4Enter the 6-digit code from the app and click Verify.
5. 5Save your backup codes with Copy all or Download .txt, then click Done.

Two-factor authentication is turned on for your own account, not for the whole workspace. The Security section is open to the owner and administrators: each of them turns 2FA on for themselves, signed in under their own name.

Backup codes

On the last step Solwees shows 10 backup codes. If your phone isn’t at hand or you’ve lost it, enter one of these codes instead of the app code when you sign in, in the same “Verification code” field. Each code works only once.

How to turn it off

Click the switch again, enter your password and a 2FA code: from the app or one of your backup codes. Then click Disable 2FA.

Attachments in the website chat

On the Attachments tab:

• ·Allow attachments turns file sending in your website chat on or off. When it’s off, the paperclip button disappears from the chat.
• ·Messenger input types: tick what clients can send: images, voice notes, files.
• ·On the right is a preview of the message field: it shows which buttons the client will see in the chat.

Changes on this tab are saved at once, there is no separate button. Clients can send files in PDF, JPG and PNG format.

Allowed domains

By default, the website chat works on any site where its code is installed. To make it work only on your own websites:

1. 1Open the Messenger tab.
2. 2In Allowed domains, type your website address and press Enter. It appears as a separate chip. Add any other addresses the same way.
3. 3Click Save domains.
4. 4Above, under Identity Verification, turn on Web messenger.

While the Web messenger switch is off, the domain list has no effect. You can’t turn the switch on with an empty list, so save your domains first.

How to write an address:

• ·The domain is enough, for example yoursite.com: https:// is added for you.
• ·Leave out any path: not yoursite.com/contact, just yoursite.com.
• ·Addresses with and without www count as different. If your site opens on both, add both.
• ·To allow all subdomains, add *.yoursite.com. Add yoursite.com itself separately.
• ·http:// is accepted only for localhost; a real website needs https://.

Tips

• ·Save your 2FA backup codes right away, while the window is open: download the file or copy them to a password manager. You can’t view them in Solwees later.
• ·Don’t keep your backup codes on the same phone as your authenticator app.
• ·After turning on Web messenger, open your website and check that the chat loads. If it doesn’t, check that the address in the list matches the one in your browser (with or without www).

FAQ