Configure Security Settings in Your Wingify Account

#Overview

Web applications contain resources that can be accessed by many users. To protect resources from unprotected access over the Internet, Wingify provides various security measures. To configure the security settings:

1. Navigate to the Profile menu in the top-right corner and select Settings.
2. Go to Account > Security.

Wingify typically provides security in the following ways:

#Login and Access

In Wingify, you have the following options to manage the login and access of your account:

• Allow Wingify team to access your account: Sometimes, the Wingify support team may need access to your account temporarily to resolve issues related to your account. Accessing your account settings helps our support members to diagnose and troubleshoot your issue faster and better. If you do not wish to allow access to the Wingify support team, uncheck this option.
• Expire users’ passwords in 90 days: Enabling this option ensures that all the users reset their Wingify password at least every 90 days. Passwords older than 90 days automatically expire, and the users cannot log in unless they change it. Users are notified over the mail with a link to reset their password before the existing password expires.
• Log users out of Wingify after 15 minutes of inactivity: Enabling this option ensures that all users are logged out of Wingify after 15 minutes of inactivity. Users have to log in again to continue using the app.
• Prevent users from reusing last <> passwords while resetting: Enabling this option allows you to set a numerical limit to restrict users from reusing the previous passwords.
• Prevent users from reusing a password that was used in the last <> days while resetting: Enabling this option allows you to set a periodical limit to restrict users from reusing the previous passwords that were used within the specified number of days.

#Alerts

Set email alerts for account administrators (Admins of the main workspace) to receive notifications for your Wingify account-related activities like successful or unsuccessful login attempts, changes made to your Wingify account. You can add multiple users to receive alerts on your account activities.

#Allow Login from Specified IP Addresses and Locations

Use this option to limit the IP addresses or locations that can access your account. This can be done by providing one or multiple IP addresses in the Allow login if IP address matches the following (add IP addresses separated by new line) field or by specifying one or multiple locations in the Allow login if location matches the following field present in Settings > Accounts > Security section of your Wingify account.

To learn how you can do this in your Wingify account refer to Enable Users to Log in to Wingify From Specified IP Addresses and Locations.

Note: You can use regular expressions to specify IP address patterns. For example, to enable access for all IPs matching the pattern "201.67.99.*", enter the regular expression as "201.67.99..*". To type a range of IP addresses, use regular expressions for IP addresses. To learn how to build a regular expression, refer to How to Build your IP Regular Expression.

#Support Ticket Access

While adding users to your Wingify account, you can assign them to multiple workspaces as required, along with the corresponding access permissions for them. However, if adding certain users to your Wingify account is not feasible, you can use this option to whitelist the respective email addresses or domains and authorize them for contacting the Wingify support team. Account Owners or Admins can authorize such users by adding them under Settings > Accounts > Security > Support Ticket Access > Whitelisted domains and emails. This action lets you specify which email addresses or domains your organization will use to contact the Wingify support team. It ensures that users added here are whitelisted and can reach out to the Wingify support team for seeking and receiving timely assistance. Wingify requires whitelisting to prevent unauthorized access and ensure account-related information is shared only with known and approved contacts of an account. It also helps maintain account security, as support queries from unrecognized or unregistered users are blocked and not entertained.

Note: This option applies only to unregistered users, email addresses, and domains that cannot be added to your Wingify account. Registered users do not need to be whitelisted.

If you are using an Agency account with multiple linked customer accounts, whitelisting works at a higher level: any user, email address, or domain whitelisted under the parent Agency account is automatically recognized across all its linked accounts.

This means:

• Agency users do not need to be whitelisted separately on every individual linked account they manage.
• Support requests raised for any linked account, from an email or domain already whitelisted at the Agency level, are automatically treated as valid and authorized.

#Extract or Delete Data For a Specific UUID

Wingify saves visitor data against a UUID which is created and saved on the visitor’s browser cookie. UUID are unique IDs that identify your website visitors and are different for each browser.

To Access/Delete the data, provide the value in the UUID field present in Settings > Accounts > Security.

For more information, refer to How to locate UUID.

Note: As soon your Access/Delete request is received by Wingify, the Wingify support team will contact you.

#Single Sign-on

Single Sign-on (SSO) is an authentication process that allows a user to access multiple applications with one set of sign-in credentials. To know more about SSO, refer to Single Sign-on in Wingify.

#SmartCode Security

SmartCode Security is a security mechanism that prevents unauthorized use of your Wingify SmartCode. When enabled, Wingify allows data collection only from domains registered in your Wingify account and automatically blocks all other data collection requests from unregistered domains. Scroll down to the SmartCode Security section, check the Restrict SmartCode usage to registered websites and appscheckbox, and click Save. You can disable SmartCode Security by clearing the Restrict SmartCode usage to registered websites and appscheckbox and clicking Save to save the changes.

#Control Wingify Execution

Note: This feature is available with Web Experimentation, Behavior Analytics, Web Personalization, and Web Rollout across all plans. If this feature does not apply to your account, the option will appear locked.

Wingify provides a security and troubleshooting feature that allows you to temporarily stop the execution of the Wingify SmartCode on your website. This functionality is particularly useful for enterprise organizations where adding or removing code snippets requires extensive internal approvals and coordination across multiple teams. By using the Control Wingify execution feature, you can simulate the removal of the Wingify SmartCode without actually touching your website's codebase. This allows your technical teams to quickly debug issues, such as page flickering or unexpected layout changes, and determine whether they are caused by Wingify or another third-party script. For example, if a site administrator notices a sudden performance dip, they can stop Wingify execution. If the issue persists even after stopping Wingify execution, the team knows the root cause lies elsewhere, saving hours of unnecessary code deployments and rollbacks.

Note:This feature is workspace-specific. If you have multiple workspaces, you must follow the steps in the following sections to manage execution for each workspace independently. Prerequisites: You must have an Owner or Admin role. For more information, refer to Roles and Permissions.

#Stop Wingify Execution

Stopping Wingify execution immediately halts all Wingify activity in the specific workspace on your site. To stop the Wingify execution:

1. Navigate to the Control Wingify execution section at the bottom of the page.
2. Click Stop execution.
3. In the confirmation dialog, review the impact and click Stop execution again.

Attention: When you stop the execution:

• Data collection and visitor tracking stop immediately.
• Changes take effect within seconds.
• Active campaign changes and personalizations are no longer visible to visitors.
• Your SmartCode installation will remain in place.
• All campaigns, configurations, and historical data remain intact.
• You can resume execution at any time.

#Resume Wingify Execution

Once the underlying issues have been investigated or resolved, you can resume the Wingify execution using two different methods:

Method 1: From Security Settings

1. Go to Profile menu > Settings > Security.
2. In the Control Wingify execution section, click Resume execution.

Method 2: By Starting a Draft or Paused Campaign

Wingify automatically prompts you to resume execution if you attempt to launch a new or paused campaign while execution is stopped. To resume Wingify execution:

1. Navigate to any Wingify campaign, for example, an A/B test campaign.
2. Select a Draft or Paused campaign.
3. Click Start Campaign.
4. In the confirmation dialog, click Resume execution and start campaign.

Once you resume Wingify execution, data collection for all the campaigns in a workspace resumes, and visitors start experiencing personalized campaigns.

#Global URL Redirection

Global URL redirection is a workspace-level security setting that lets Owners and Admins disable all URL-based redirection capabilities across the workspace. This means visitors can no longer be redirected to a different URL as part of an experiment. This restriction includes redirecting visitors to an alternate page in a Split URL test or configuring variation redirects through the Visual Editor or Experiences & Traffic setup in an A/B test, Personalize, or Web Rollout campaign. This setting is useful for enterprise organizations with strict security policies around URL manipulation.

Note:

• Global URL redirection applies only to a single workspace. If you manage multiple workspaces, you must configure Global URL redirection separately for each one.
• This setting controls redirection behavior only. It does not disable or pause variations. To stop traffic to a specific variation without affecting the rest of your campaign, use Disable variation from the campaign's Experiences & Traffic view instead. For more information, see How to Disable a Variation in Wingify?.

#Disable Redirections

To disable URL-based redirection across the workspace:

1. Navigate to the Profile menu in the top-right corner and select Settings.

2. Go to Accounts > Security.

   Note: Although you navigate through Accounts > Security, this setting applies only to the workspace you are currently in. If you manage multiple workspaces, repeat these steps separately within each one.

3. Scroll to the Global URL redirection section.

4. Check Disable redirections. Click Save.
   A confirmation dialog appears, with different content depending on whether live campaigns currently use redirections:

• If no live campaigns use redirections: The dialog warns that users cannot create or run campaigns that rely on URL redirection.
• If live campaigns use redirections: The dialog lists the affected campaigns by name and URL and warns that redirections will stop working for these campaigns.

5. Click Yes, disable redirections or Disable redirections, depending on the dialog, to confirm. Click Cancel to close the dialog without disabling redirections.
   A confirmation message appears once the setting is saved.

Attention: When redirections are disabled:

• You cannot create a new Split URL test or redirect a variation to a different page. To re-enable creation of Split URL tests and variation redirects, see Re-enable Redirections.
• Existing redirect fields on variations are locked and cannot be edited
• You can pause running campaigns that use redirections, but you cannot resume them or create new campaigns. You can resume these campaigns once redirections are re-enabled. Campaigns in Draft, QA, or Ready to Live states cannot be moved to another state while this setting is enabled.
• Live campaigns are not automatically paused. Only redirections stop working. For example, Split URL visitors continue to see only the Control version. Wingify recommends manually pausing affected campaigns to avoid inconsistent reporting data.
• You can still perform other actions, such as cloning or sharing, on affected campaigns.

#Re-enable Redirections

You must have an Owner or Admin role in Wingify to re-enable redirections. Re-enable this setting when you want to resume paused campaigns, create new Split URL tests, or configure variation redirects~~.~~

1. Navigate to the Profile menu in the top-right corner and select Settings.
2. Go to Accounts > Security.
3. In the Global URL redirection section, uncheck Disable redirections.
4. Click Save.

A confirmation message appears once the setting is saved.

#Need more help?

For further assistance and more information, contact Wingify Support.