<div class="support-note success primary"><strong>Note:</strong> Due to differing protocols, Pipedrive’s two-factor authentication can’t work alongside the “<strong>Log in with Google</strong>” function or the <a href="https://support.pipedrive.com/en/article/single-sign-on" target="_blank" rel="noreferrer noopener">single-sign-on feature</a> of the Advanced, Professional, Power and Enterprise plans. We suggest your company choose the option that best fits its security needs.</div>
<p dir="ltr" style="text-align: justify">Your Pipedrive account contains valuable business information, customer data and possibly access to other integrated tools. It’s your business's lifeline, so you should always protect it.</p>
<p dir="ltr" style="text-align: justify">A strong password can help to keep your account and data safe, but it’s vulnerable to data breaches, guessing, and phishing.</p>
<p dir="ltr" style="text-align: justify">Two-factor authentication, or 2FA, adds another layer of security to your personal information and we strongly suggest enabling it for your Pipedrive user account<br></p>
<hr>
<h2 style="text-align: justify">Where to find it<a name="where-to-find-it"></a></h2>
<p style="text-align: justify">To access two-factor authentication, go to <strong>Personal preferences &gt; <a href="https://app.pipedrive.com/settings/password" target="_blank" rel="noreferrer noopener">Password and login</a> &gt; Two-factor authentication (2FA)</strong> and enable either the <strong>authenticator app</strong> or <strong>verification link</strong> options for your user account in Pipedrive.<br></p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/2fa-1.png" alt=""></figure>

<div class="support-note success primary"><strong>Note</strong>: The two-factor authentication verification link can be opened through the mobile app, however, <strong>it must be set up in the web app</strong>. Once two-factor authentication is set up on the account, a verification email will be sent when you log in via the mobile app, just as it does when logging in through the web app.</div>
<hr>
<h2>Authenticator app<a name="authenticator-app"></a></h2>
<p style="text-align: justify">Implementing two-factor authentication (2FA) with an <strong>authenticator app</strong> significantly enhances account security by requiring a second form of verification beyond the traditional username and password. This reduces the risk of unauthorized access, as attackers would need both the password and the physical device to generate the authentication code.<strong><br><br>Benefits of 2FA with an Authenticator App</strong></p>
<ul><li><strong>Enhanced Security:</strong> Authenticator apps generate time-sensitive codes, making it difficult for attackers to gain access even if they have the user’s password</li><li><strong>Protection Against Phishing</strong>: Since the code is generated on a separate device, phishing attempts to steal passwords are less effective</li><li><strong>Reduced Account Compromise:</strong> Data breaches involving password theft are mitigated as the second factor is required for access</li><li><strong>User Control:</strong> Users have more control over their account security with an additional layer of protection</li></ul>
<p>To enable this option, click on <strong>“Connect authenticator app”</strong>.</p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/2fa-2.png" alt=""></figure>

<p style="text-align: justify">Once you click on it, for security purposes, you may be asked to re-enter your password.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/re-enter%20pass.png" alt=""></figure>
<p style="text-align: justify">Then, you’ll need to connect your Pipedrive account to the authenticator app of your preference. There are two ways to do it:</p>
<ul><li>Scan the QR code with your authenticator app</li><li>Enter a 6-digit code from your authenticator app</li></ul><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/2fa-4.png" alt=""></figure>

<p style="text-align: justify">After successfully connecting your authenticator app, you’ll see a screen with backup codes. </p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/2fa-5.png" alt=""></figure>

<p style="text-align: justify">These codes can be used to access your account if you lose access to your authenticator app.</p>
<div class="support-note warning"><strong>Note:</strong> We recommend saving these codes in a secure location by either downloading them as a TXT file or copying them to your clipboard. They should be stored in a password manager, printed on a piece of paper or similar. <strong>Misplaced or exposed codes can compromise account security</strong>.</div>
<p style="text-align: justify">Once the 2FA with the authenticator app is successfully set up, you’ll receive an email confirming the changes.</p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/2fa-6.png" alt=""></figure>

<div class="support-note warning"><strong>Note:</strong> If you didn’t set up the authenticator app and suspect your account might be compromised, <a href="https://support.pipedrive.com/contact-us" target="_blank" rel="noreferrer noopener">contact our support team immediately</a>.</div>
<hr>
<h2 style="text-align: justify">Verification link<br><a name="verification-link"></a></h2>
<p dir="ltr" style="text-align: justify">We always recommend using the authenticator app as the second layer of protection for your account. If, for any reason, you can’t use one, there’s a simpler but less secure 2FA option available as well: a verification link via email.</p>
<p dir="ltr" style="text-align: justify">Be mindful that since your password can also be reset via the same email, an attacker only has to compromise your email inbox to take over your account.<br></p>
<p style="text-align: justify">When enabled, logging in to Pipedrive will prompt an email to be sent to the email address you use to log in to Pipedrive with a verification link that will allow you access to your Pipedrive account.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Markup%20on%202024-06-27%20at%2008%3A38%3A15.png" alt=""></figure>
<p style="text-align: justify">You need to open the verification link from a <strong>native email app</strong>, such as Gmail, Microsoft Outlook, ProtonMail, etc. That same email will provide you with information about where that verifiable login occurred in the world.</p>
<div style="text-align: justify" class="support-note warning"><strong>Note:</strong> If you find that the information presented on that email does <strong>not</strong> match your login attempt, we suggest <a href="https://support.pipedrive.com/en/article/how-can-i-change-or-reset-my-password" target="_blank" rel="noreferrer noopener">changing your login credentials</a>, as someone may be attempting to gain access to your account.<br></div>

2FA: two-factor authentication

where-to-find-it

Where to find it

authenticator-app

Authenticator app

verification-link

Verification link

<div style="text-align: justify" class="support-note success primary"><strong>Note: </strong>The features in this article require different subscription levels. For more information about the features in each of our available plans, check out <a href="https://support.pipedrive.com/en/article/what-features-do-the-pipedrive-plans-have" target="_blank" rel="noreferrer noopener">this page. </a><br></div>
<p style="text-align: justify">Pipedrive offers numerous security-related features to give you full transparency of how and when your data is being accessed.</p>
<hr>
<h2 style="text-align: justify">
<a name="permission-and-visibility-settings"></a>Permission and visibility settings</h2>
<p style="text-align: justify"><strong>Permission sets</strong></p>
<p style="text-align: justify">Users with account settings access can set up <a href="https://support.pipedrive.com/en/article/permission-sets" title="https://support.pipedrive.com/en/article/permission-sets">permission sets</a> to control what other users can do in Pipedrive, such as deleting deals or editing custom fields.</p>
<p style="text-align: justify">You can see the full list of actions that can be controlled via permission sets in <a href="https://support.pipedrive.com/en/article/permission-sets" title="https://support.pipedrive.com/en/article/permission-sets">this article.</a></p>
<p style="text-align: justify">The number of visibility groups and default options you have also depends on the plan you are on.</p>
<ul><li><strong>Essential and Advanced plans</strong><br>One default group and two visibility options: item's owner or all users</li><li><strong>Professional plans </strong><br>One default group plus three customizable visibility groups and four visibility options: item’s owner, item owner’s visibility group, item owner’s visibility group and sub-groups, or all users</li><li><strong>Enterprise plans </strong>Unlimited amount of groups and four visibility options: item’s owner, item owner’s visibility group, item owner’s visibility group and sub-groups, or all users</li>
</ul>
<p style="text-align: justify"><strong><br>Visibility groups</strong></p>
<div class="support-note success primary"><strong><strong>Note: </strong></strong>You can purchase the <a href="https://support.pipedrive.com/article/booster-packs" target="_blank" rel="noreferrer noopener">team management booster pack</a> to add more visibility groups without upgrading your plan.<br></div>
<p style="text-align: justify">While permission sets control what users can do in Pipedrive, <a href="https://support.pipedrive.com/en/article/visibility-groups" target="_blank" rel="noreferrer noopener">visibility groups</a> control what deals, contacts and products users can see. Creating visibility groups is useful if you want certain users to not see specific information in your company account. The number of visibility groups you have also depends on the plan you’re on. </p>
<ul>
<li>
<strong>Essential and Advanced plans</strong><br> Two visibility groups: the item’s owners and followers or the entire company</li>
<li>
<strong>Professional and higher plans</strong><br> Four visibility groups: item’s owner only, owner’s visibility group, owner’s visibility group and sub-groups or to the entire company</li>
</ul>
<p style="text-align: justify"><strong>Pipeline Visibility</strong></p>
<p style="text-align: justify">Users with account settings access can edit the <strong>pipeline</strong> visibility settings for users in the visibility groups by de-selecting the pipelines that each group shouldn’t be able to see. By default, all visibility groups will have access to all pipelines.</p>
<p style="text-align: justify">Visibility groups that don’t have access to specific pipelines won’t be able to see any trace of the pipeline nor deals inside that pipeline in Pipedrive, as the pipeline will be completely hidden from their accounts.</p>
<p style="text-align: justify">Users with deals admin permission set will always have access to all pipelines and deals, regardless of the visibility group settings. Learn more about pipeline visibility in <a href="https://support.pipedrive.com/en/article/pipeline-visibility" target="_blank" rel="noreferrer noopener">this article</a>.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="2-fa-two-factor-authentication"></a>2FA: two-factor authentication</h2>
<p style="text-align: justify">The <a href="https://support.pipedrive.com/en/article/2fa-two-factor-authentication" target="_blank" rel="noreferrer noopener">two-factor authentication feature </a>adds an extra layer of security to confirm that the user trying to log in to Pipedrive is actually who they say they’re. This feature can be implemented by using an authenticator app or the verification link via email.<br><br>When 2FA is enabled to receive the <strong>verification link email</strong>, logging in to Pipedrive will prompt an email to be sent to the email address you use to log in to Pipedrive. This email will contain information about the login attempt and a verification link that will allow you access to your Pipedrive account. </p>
<p>The <strong>authenticator app</strong> has added security, since only individuals with access to the app can retrieve the verification codes necessary to sign in, providing stronger protection against unauthorized access to your account.</p>
<hr>
<h2 style="text-align: justify">
<a name="single-sign-on-sso"></a>Single sign-on (SSO)</h2>
<p style="text-align: justify">Many large companies use a third-party SSO service such as Okta and Azure AD to allow users to securely authenticate and log into multiple applications with just one set of login credentials. </p>
<p style="text-align: justify">Pipedrive's <a href="https://support.pipedrive.com/en/article/single-sign-on" target="_blank" rel="noreferrer noopener"><strong>single sign-on feature</strong></a> will allow you to add Pipedrive to the SSO provider your company has set up, allowing for a stress-free Pipedrive login experience for users and a more secure way for administrators to control user access. </p>
<hr>
<h2 style="text-align: justify">Security dashboard<a name="security-dashboard"></a></h2>
<div style="text-align: justify" class="support-note success primary"><strong>Note: </strong>Some <strong>security dashboard</strong> features are only available on Pipedrive's Enterprise plan. The security dashboard is only visible by default to admin users. Visibility of the security dashboard for regular users can be turned on by admin users under <a href="https://support.pipedrive.com/en/article/permission-sets" target="_blank" rel="noreferrer noopener">permissions.</a><br></div>
<p style="text-align: justify">The <strong>security dashboard feature</strong> will provide full transparency of user access information and security-related activity that occurs in your company account. </p>
<ul>
<li>
<strong>User access and device logs</strong><br> Which users are accessing your account and any additional login information such as device, location and login time</li>
<li>
<strong>Audit log<br></strong>A log of all of the security-related changes made in your company account by any user in the past two months</li>
<li>
<strong>Security assessment</strong><br>A report on what Pipedrive believes are potential security vulnerabilities in your Pipedrive company account, based on current access and permission-related user settings</li>
</ul>
<p style="text-align: justify">On Pipedrive’s Essential and Advanced plans, you won’t have access to all of these features, but you’ll have a security dashboard displaying:</p>
<ul><li>Users logged in</li><li>A brief overview of the past week</li><li>A security assessment showing you high and low-risk issues</li></ul>
<h2 style="text-align: justify"> </h2>
<hr>
<h2 style="text-align: justify">Security rules<a name="security-rules"></a></h2>
<div class="support-note success primary"><strong>Note: </strong>The security rules feature is available for our Enterprise plan users.</div>
<p style="text-align: justify">With the <a href="https://support.pipedrive.com/en/article/security-rules" target="_blank" rel="noreferrer noopener"><strong>security rules</strong></a> feature, users with account settings access can enforce access restrictions to ensure that business data is only available to the right people at the right place and time.</p>
<ul>
<li><strong>2FA: two-factor authentication</strong><br>Enforce two-factor authentication for all users</li>
<li><strong>Password rules <br></strong>Enforce password-related rules such as password strength, password expiration and password reuse</li>
<li>
<strong>IP address and time range access</strong><br>The advanced rules section of the security rules feature will allow you to limit user access by IP address and time range</li>
</ul>
<hr>
<h2 style="text-align: justify">Security alerts<a name="security-alerts"></a></h2>
<div class="support-note success primary"><strong>Note: </strong>This security alerts feature is available for our Enterprise plan users.</div>
<p style="text-align: justify">The <a href="https://support.pipedrive.com/en/article/security-alerts" target="_blank" rel="noreferrer noopener"><strong>security alerts feature</strong></a> will allow users with account settings access to set up email notifications according to security-related events that occur in the company account. The alerts can be configured to send out in live time or in regular daily or weekly intervals. </p>
<ul>
<li>
<strong>Account access alerts</strong><br> Email alert sent when any user access-related activity occurs, such as user logs in from a new device, user logs in from new location, etc. </li>
<li>
<strong>Data leakage and loss </strong><br> Email alert sent when data is exported or deleted from Pipedrive. </li>
<li>
<strong>Audit log <br></strong>All security alerts can be tracked in the <a href="https://support.pipedrive.com/en/article/security-dashboard" target="_blank" rel="noreferrer noopener">security dashboard</a> under the audit log. </li>
</ul>

Security features in Pipedrive

permission-and-visibility-settings

Permission and visibility settings

2-fa-two-factor-authentication

single-sign-on-sso

Single sign-on (SSO)

security-dashboard

Security dashboard

security-rules

Security rules

security-alerts

Security alerts

<div class="support-note primary"><strong>Note:</strong> Some <strong>security dashboard</strong> features are only available on Pipedrive’s Enterprise plan. By default, the security dashboard is visible only to admin users. However, admin users can turn on the visibility of the security dashboard for regular users under <a href="https://support.pipedrive.com/en/article/permission-sets" target="_blank" rel="noreferrer noopener">permissions</a>.</div>
<p style="text-align: justify">Data security is one of the most important components of any customer-facing business. With the security dashboard feature, you’ll have full transparency of user access and security-related activity in your Pipedrive company account, as well as tips on how to improve your data’s security settings.</p>
<figure><img class="vidyard-player-embed" src="https://play.vidyard.com/yuQ3VmWMHPbYPkTFc6Gdt2.jpg" alt=""></figure>
<p style="text-align: justify"><br><br>To see the <strong>security dashboard</strong> of your Pipedrive company account, go to <strong>Settings &gt; Security center &gt; <a href="https://app.pipedrive.com/settings/security-dashboard" target="_blank" rel="noreferrer noopener">Dashboard</a>. </strong></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Markup%20on%202024-04-30%20at%2013%3A42%3A23.png" alt=""></figure>
<p style="text-align: justify">The first section of your dashboard will show information related to user access in your Pipedrive company account.</p>
<p style="text-align: justify">You can hover over and click each of the sections to see more information.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-30%20at%2017.29.22.png" alt=""></figure>
<hr>
<h2 style="text-align: justify">
<a name="right-now"></a>Right now
</h2>
<ul>
<li>
<strong>Users logged in – </strong>A list of users logged into your Pipedrive company account at that moment and their locations. You can also see the number of offline users and the time they were logged out.
</li>
<li>
<strong>Unique locations – </strong>The number of devices logged in by location, in descending order</li>
</ul>
<p style="text-align: justify">To find out more about the devices and users currently logged into your company account, you can click on the <strong>Active devices</strong> section in the bottom section of the dashboard. </p>
<hr>
<h2 style="text-align: justify">
<a name="last-7-days"></a>Last 7 days
</h2>
<div class="support-note success primary"><strong>Note: </strong>This is available on all Pipedrive plans.</div>
<ul>
<li>
<strong>New devices – </strong>The number of new devices that were used to log in in the past 7 days, which users logged in with these devices and the login time</li>
<li>
<strong>New locations – </strong>A list of new locations the devices had logged in from in the past 7 days, which users logged in under these locations and the login time</li>
<li>
<strong>Security events – </strong>The number and type of security events related to and done by your company users in the past 7 days. To see these events, click on the<strong> </strong>“<strong>Audit log</strong>” in the bottom section of the dashboard.</li>
<li>
<strong>Force logouts – </strong>The number of times the <strong>Logout</strong> or <strong>Log out all</strong> buttons had been clicked from the devices or security dashboard page, which devices were logged out as a result and the time and date they were logged out</li>
</ul>
<hr>
<h2 style="text-align: justify">
<a name="security-assessment"></a>Security Assessment
</h2>
<div class="support-note success primary"><strong>Note: </strong>This is available on all Pipedrive plans.<strong><br></strong></div>
<p style="text-align: justify">This <strong>Security assessment</strong> section will give you a report on what Pipedrive believes are potential security vulnerabilities in your Pipedrive company account, based on current access and permission-related user settings. </p>
<p style="text-align: justify">The measures are categorized as <strong>HIGH-RISK ISSUES</strong>, <strong>LOW-RISK ISSUES</strong>, or <strong>NON-ISSUES</strong>. If there are any high-risk or low-risk issues, alerts and suggestions will be provided to help decrease the amount of security risk that is detected in your company account. <br><br>Click on <strong>“See what you can improve”</strong> to see the measures Pipedrive uses to assess account security<strong>. </strong></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-30%20at%2017.50.27.png" alt=""></figure>
<p style="text-align: justify">Clicking on “<strong>Review permissions</strong>” will take you directly to the company’s permission settings, where you can adjust your user permissions accordingly.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2015.44.07.png" alt=""></figure>
<p style="text-align: justify">Clicking on the question mark icon next to each measure will provide a tooltip from Pipedrive on how you can improve this particular security measure in your company settings.<br></p>
<div class="support-note primary">
<strong>Note:</strong> Depending on the nature and setup of your business, the security alerts and tips suggested may not be of critical urgency to your company account. We recommend looking over the measures to see which ones may be the most relevant to you before making any permission or setting changes. 
</div>
<hr>
<h2 style="text-align: justify">
<a name="active-devices"></a>Active devices
</h2>
<div class="support-note success primary"><strong>Note:</strong> The <strong>active devices</strong> feature is one of the many useful features of Pipedrive’s Enterprise plan.<br></div>
<p style="text-align: justify">Under <strong>Active devices</strong>, you’ll see all the devices currently logged in to your Pipedrive company account. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Markup%20on%202024-05-02%20at%2015%3A57%3A12.png" alt=""></figure>
<p style="text-align: justify">The following fields are provided for each device entry:</p>
<ul>
<li>
<strong>User – </strong>The user logged in with that device and the permission level they are on</li>
<li>
<strong>Device – </strong>The device used to log in</li>
<li>
<strong>Location – </strong>The location that the device logged in from and the IP address</li>
<li>
<strong>Login – </strong>The date and time of login and the method used to log in<br>(30d) means the user had clicked the “<strong>Remember me</strong>” button when logging in to Pipedrive and will stay logged in for 30 days. <br>(12h) means the user had not clicked the “<strong>Remember me</strong>” button when logging in to Pipedrive and will be automatically logged out after 12 hours.
</li>
</ul>
<p style="text-align: justify">If you hover over the device entry, you can manually log that device out by clicking the “<strong>Log out</strong>” button that appears on the right side.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2016.03.57.png" alt=""></figure>
<p style="text-align: justify">The filter button in the top right corner will give you the option to choose which user you wish to see. If you want to force log out of all of the filtered devices or export this list to a spreadsheet, you can click on the <strong>“…”</strong> icon.<br></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2016.06.18.png" alt=""></figure>
<hr>
<h2 style="text-align: justify">
<a name="device-history"></a>Device history
</h2>
<div class="support-note success primary"><strong>Note:</strong> The <strong>device</strong> <strong>history</strong> feature is one of the many useful features of Pipedrive's Enterprise plan.</div>
<p style="text-align: justify">Under<strong> device history</strong>, you’ll be able to see a list of all of the devices that have been used to log in to your Pipedrive company account in the past two months. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Markup%20on%202024-05-02%20at%2015%3A39%3A17.png" alt=""></figure>
<p style="text-align: justify">The following fields are provided for each device entry:</p>
<ul>
<li>
<strong>User – </strong>The user logged in with that device and the permission level they are on</li>
<li>
<strong>Device – </strong>The device used to log in</li>
<li>
<strong>Location – </strong>The location that the device logged in from and the IP address</li>
<li>
<strong>Login – </strong>The date and time of login and the method used to log in</li>
<li>
<strong>Logout – </strong>The date and time of logout and the method used to log out. The method of logout can either be manually or through expiration. 
</li>
</ul>
<p style="text-align: justify">The filter button in the top right corner allows you to choose which user and time frame you wish to see. The <strong>”</strong><strong>…”</strong> button also allows you to export your filtered results to a spreadsheet.<br></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2019-06-04_at_3.04.34_PM.png" alt="Screen_Shot_2019-06-04_at_3.04.34_PM.png" width="300" height="187"></figure>
<hr>
<h2 style="text-align: justify">
<a name="audit-log"></a>Audit log
</h2>
<div class="support-note success primary"><strong>Note:</strong> The <strong>audit log</strong> feature is one of the many useful features of Pipedrive's Enterprise plan.</div>
<p style="text-align: justify">Under the <strong>Audit log</strong> section, you’ll be provided with a log of all of the security-related changes made in your company account by any user in the past two months.</p>
<p style="text-align: justify">Configured <strong><a href="https://support.pipedrive.com/article/security-alerts" target="_blank" rel="noreferrer noopener">security alerts</a></strong> can be tracked under the <strong>Alerts</strong> tab. <br></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2016.12.20.png" alt=""></figure>

<p style="text-align: justify">The following fields are provided for each security-related event:</p>
<ul>
<li>
<strong>User – </strong>The user name and permission level they are on</li>
<li>
<strong>Event – </strong>The security-related event that occurred</li>
<li>
<strong>Type – </strong>The type of security-related event that occurred</li>
<li>
<strong>Time – </strong>The date and time of the security-related event</li>
</ul>
<p style="text-align: justify">In the top right corner, you can filter for the user, type of security event and time frame. The<strong> </strong>“<strong>…</strong>” button will also allow you to export your filtered results to a spreadsheet.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2019-11-15_at_3.55.17_PM.png" alt="Screen_Shot_2019-11-15_at_3.55.17_PM.png" width="400" height="318"></figure>
<p style="text-align: justify"> </p>
<hr>
<h2 style="text-align: justify">Security dashboard summary emails<a name="security-dashboard-summary-emails"></a></h2>
<p style="text-align: justify">At the beginning of each month, all admins and users with permission to see the security dashboard receive an email summarizing security-related events from the previous month. </p>
<p style="text-align: justify">This email will present the number of new devices, new locations, security events, forced logouts and high and low-risk security vulnerabilities.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2015.16.38.png" alt=""></figure>
<p style="text-align: justify">If there’s anything worth further investigating, you can click on “<strong>Security dashboard</strong>” to be brought directly to the security page in your Pipedrive account. </p>

right-now

Right now

last-7-days

Last 7 days

security-assessment

Security Assessment

active-devices

Active devices

device-history

Device history

audit-log

Audit log

security-dashboard-summary-emails

Security dashboard summary emails

<div class="support-note primary">
<strong>Note:</strong> The <strong>security rules</strong> feature is one of the many useful features of Pipedrive's Enterprise plan. Only users with account settings access can set up security rules in a company account. 
</div>
<p style="text-align: justify">Keeping data safe is essential for any business. The security rules feature allows you to enforce access restrictions to ensure that business data is only available to the right people at the right place and time.</p>
<p style="text-align: justify">To access and set up your security rules, go to <strong>Settings &gt; Security center &gt; <a href="https://app.pipedrive.com/settings/security-rules" target="_blank" rel="noreferrer noopener">Rules</a></strong>. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-17%20at%2017.59.49.png" alt=""></figure>
<div class="support-note success primary"><strong>Note</strong>: With the exception of two-factor authentication, security rules won’t apply when accessing Pipedrive through the mobile app.<br></div>
<hr>
<h2>
<a name="two-factor-authentication-2-fa"></a>Two-factor authentication (2FA)</h2>
<p style="text-align: justify">You can toggle this option to enforce <a href="https://support.pipedrive.com/en/article/2fa-two-factor-authentication" target="_blank" rel="noreferrer noopener">two-factor authentication (2FA)</a> for all users.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-17%20at%2018.29.53.png" alt=""></figure>
<p>Once enabled, go to <strong>Personal preferences&gt; </strong><a href="https://app.pipedrive.com/settings/password" target="_blank" rel="noreferrer noopener"><strong>Password and login</strong></a><strong> &gt; Two-factor authentication (2FA)</strong>, and you'll have two options to select from: the <strong>authenticator app</strong> or the <strong>verification link.</strong><strong> </strong><br><br>The authenticator app allows you to select a specific app as the second step of authentication while with the verification email link, you'll receive a confirmation email. <br></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-09-27%20at%2012.16.27.png" alt=""></figure>
<p> Each user will only need to be verified every 30 days on each device.</p>
<hr>
<p><a name="C2IamCs"></a></p>
<h2>Password strength<a name="password-strength"></a></h2>
<p style="text-align: justify">When a user with account settings access enforces password strength requirements, any users with passwords that don’t fulfill those requirements will be asked to change their password the next time they log in.</p>
<p style="text-align: justify">You can make sure user passwords have one or more of the following:<br></p>
<ul>
<li>At least one lowercase and one uppercase letter</li>
<li>At least one number</li>
<li>At least one special character ( '!', '@', '&amp;', etc.)</li>
<li>A minimum amount of characters (must be at least 8)</li>
</ul>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-17%20at%2018.29.37.png" alt=""></figure>
<h2> </h2>
<hr>
<p><a name="C3IamCs"></a></p>
<h2>Password expiration and reuse<a name="password-expiration-and-reuse"></a></h2>
<p style="text-align: justify">A password expiration date or password reuse condition can be set up for your users’ passwords. </p>
<ul>
<li>
<strong>Password expires – </strong>Your users’ passwords can be set to expire every 365 days, 180 days, 90 days, 60 days, 30 days, or never.</li>
<li>
<strong>Password reuse – </strong>Password resets can be limited to forbid just the current password or current password and one previous password</li></ul>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-17%20at%2018.29.26.png" alt=""></figure>
<hr>
<p><a name="C4IamCs"></a></p>
<h2>Advanced rules<a name="advanced-rules"></a></h2>
<p style="text-align: justify">When you expand the <strong>Advanced rules</strong> section, you’ll be able to set up more sophisticated security rules to limit user access.</p>
<div class="support-note success primary"><strong>Note:</strong> Once enforced, advanced rules will immediately apply to all users without account settings access.</div>
<div class="support-note success primary"></div>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-17%20at%2018.34.14.png" alt=""></figure>
<h3 style="text-align: justify">Allow access only for specific IP addresses<a name="allow-access-only-for-specific-ip-addresses"></a></h3>
<p style="text-align: justify">If you want your users to only access Pipedrive when they’re in specific locations, you can add IP address conditions to your advanced security rules.</p>
<p style="text-align: justify">All users without account settings access will then only have access to company data when they’re under these IP addresses. Click on “<strong>Add IP address</strong>” to get started.</p>
<p style="text-align: justify">In the <strong>Add IP</strong> window, you can either type in an IP address or auto-fill your current IP address. Depending on your access limitation requirements, you can add more than one IP address.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Markup%20on%202024-04-17%20at%2018%3A37%3A13.png" alt=""></figure>
<h3>Allow access only at specific times<a name="allow-access-only-at-specific-times"></a></h3>
<p style="text-align: justify">Enabling this rule will restrict user access to specific time frames, such as company working hours or a timezone.</p>
<p style="text-align: justify">All users without account settings access will lose access to Pipedrive outside of the added days, times and time zones.</p>
<p style="text-align: justify">You can click on “<strong>Add time range</strong>” to set up your time range restrictions. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-17%20at%2018.38.51.png" alt=""></figure>
<p> </p>
<hr>
<p><a name="C5IamCs"></a></p>
<h2>Confirming and validating your changes<a name="confirming-and-validating-your-changes"></a></h2>
<p style="text-align: justify">Once all of the rules are set up, you can click on “<strong>Preview and enforce</strong>” to validate your changes.</p>
<p style="text-align: justify">Confirm your security rule details in the window that appears and click on “<strong>Enforce now</strong>” to implement your rules. </p>
<p style="text-align: justify">You can choose where to send a summary of the changes made to your users. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-04-17%20at%2018.42.26.png" alt=""></figure>

two-factor-authentication-2-fa

Two-factor authentication (2FA)

password-strength

Password strength

password-expiration-and-reuse

Password expiration and reuse

advanced-rules

allow-access-only-for-specific-ip-addresses

Allow access only for specific IP addresses

allow-access-only-at-specific-times

Allow access only at specific times

Advanced rules

confirming-and-validating-your-changes

Confirming and validating your changes

<div class="support-note success primary"><strong>Note:</strong> The <strong>security rules</strong> feature is one of the many useful features of Pipedrive's Enterprise plan. </div>
<p style="text-align: justify">If you see any of the following access restriction prompts or errors when trying to log in to Pipedrive, your user with account settings access has set up <a href="https://support.pipedrive.com/en/article/security-rules" title="https://support.pipedrive.com/en/article/security-rules"><strong>security rules</strong></a> to restrict user access to your company account. We recommend reaching out to a<strong> user with account settings access</strong> for more information on these restrictions.</p>
<div class="support-note success primary"><strong>Note</strong>: With an exception of two-factor authentication, security rules won’t apply when accessing Pipedrive through the Mobile App.</div>
<hr>
<h2 style="text-align: justify">
<a name="two-factor-authentication-verification"></a>Two-factor authentication verification </h2>
<p style="text-align: justify">When the <a href="https://support.pipedrive.com/en/article/2fa-two-factor-authentication" target="_blank" rel="noreferrer noopener"><strong>two-factor authentication</strong></a> security rule has been applied with the <strong>verification email</strong>, all users will receive a verification notice the next time they try to log in to Pipedrive. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-01-20_at_11.17.26_AM.png" alt="Screen_Shot_2020-01-20_at_11.17.26_AM.png" width="600" height="462"></figure>
<p><br>If you select the <strong>authenticator app</strong> for an extra layer of security in your account, this means that only users with access to that app can view the verification codes required to log in, enhancing the protection of your account against unauthorized access.</p>

<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-09-27%20at%2012.34.43.png" alt=""></figure>
<hr>
<h2 style="text-align: justify">
<a name="password-strength-requirements"></a>Password strength requirements</h2>
<p style="text-align: justify">If a <strong>Password strength</strong> rule is set up, all admin and regular users will be prompted with a “<strong>Reset your password</strong>” window according to those rules the next time they try to log in to Pipedrive: </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2017.13.30.png" alt=""></figure>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-01-20_at_11.45.14_AM.png" alt="Screen_Shot_2020-01-20_at_11.45.14_AM.png" width="600" height="637"></figure>
<hr>
<h2 style="text-align: justify">
<a name="password-expiration-and-reuse"></a>Password expiration and reuse </h2>
<p style="text-align: justify">Once a user with account settings access sets up any <strong>Password expiration and reuse</strong> rule, all users will be prompted to reset their password according to those rules the next time they try to log in.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2017.13.54.png" alt=""></figure>
<p style="text-align: justify">Depending on the condition set up under <strong>Password expires</strong>, you’ll be brought to a <strong>Reset your password</strong> window after that time frame passes. </p>
<p style="text-align: justify">If the new password entered does not fulfill the requirement set up under <strong>Password reuse</strong>, you’ll see an error such as “<strong>New password cannot be the same as the current password</strong>” or “<strong>New password cannot be the same as previous password</strong>”, depending on the condition set up. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-01-20_at_11.58.44_AM.png" alt="Screen_Shot_2020-01-20_at_11.58.44_AM.png"></figure>
<hr>
<h2 style="text-align: justify">
<a name="advanced-rules"></a>Advanced rules </h2>
<p style="text-align: justify">Advanced rules and restrictions will be applied to all users without account settings access when trying to access Pipedrive outside of a specific time frame or location specified. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-05-02%20at%2017.14.58.png" alt=""></figure>
<p style="text-align: justify">If an <strong>IP address restriction</strong> is set up, a user who tries to log in to Pipedrive from a location not specified will see this access restricted notice when trying to log in: <br></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-01-20_at_2.05.49_PM.png" alt="Screen_Shot_2020-01-20_at_2.05.49_PM.png" width="600" height="317"></figure>
<p style="text-align: justify">If a <strong>time range access restriction</strong> is set up, a user who tries to log in to Pipedrive from outside of the time frame will see this access restricted notice when trying to log in: <br></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-01-20_at_2.06.23_PM.png" alt="Screen_Shot_2020-01-20_at_2.06.23_PM.png" width="601" height="303"></figure>

Security rules access restrictions

two-factor-authentication-verification

Two-factor authentication verification

password-strength-requirements

Password strength requirements

<div class="support-note primary">
<strong>Note:</strong> The <strong>security alerts</strong> feature is one of the many useful features of Pipedrive's Enterprise plans. Only users with account settings access can set up security alerts in a company account. 
</div>
<p style="text-align: justify">The<strong> security alerts feature</strong> will allow admins users to set up email notifications according to security-related events that occur in the company account. With these alerts enabled, admins will be notified immediately or regularly to assess when company data may be at risk.</p>
<p style="text-align: justify">To access and set up security alerts, go to <strong>Settings &gt; Security center &gt; <a href="/settings/security-alerts">Alerts</a>.</strong></p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-08-25_at_4.36.31_PM.png" alt="Screen_Shot_2020-08-25_at_4.36.31_PM.png" width="963" height="655"></figure>
<hr>
<h2 style="text-align: justify">
<a name="account-access-alerts"></a>Account access alerts</h2>
<div class="support-note success primary"><strong>Note:</strong> Security email alerts will be sent to the email address of the admin user's login email address.</div>
<p style="text-align: justify">The <strong>Account access alerts</strong> section will allow you to receive email alerts when a<strong> user access-related</strong> event happens in your account. These alerts will be triggered by activity from both regular users and other admin users. </p>
<p style="text-align: justify">You can set up email alerts for any time one of the following user access related events occurs: </p>
<ul>
<li>User logs in from a new device</li>
<li>User logs in from a new location </li>
<li>New user is invited</li>
<li>User has more than 3 failed login attempts in a row </li>
<li>User requests password reset </li>
</ul>
<p style="text-align: justify"><br></p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-01_at_2.40.44_PM.png" alt="Screen_Shot_2020-04-01_at_2.40.44_PM.png" width="599" height="275"></figure>
<p style="text-align: justify">Once you've selected the alerts you want to receive, you can set up the <strong>grouping and time</strong> of your alerts. </p>
<ul>
<li><strong>Each alert as a separate email, sent instantly</strong></li>
<li>
<strong>All in one email, sent at a specific time – </strong>If you select this option, you will see the option to choose the day and time you wish to receive the email. </li>
</ul>
<hr>
<h2 style="text-align: justify">
<a name="data-leakage-and-loss"></a>Data leakage and loss </h2>
<p style="text-align: justify">Alerts related to <a href="https://support.pipedrive.com/en/article/exporting-data-from-pipedrive" target="_blank" rel="noreferrer noopener"><strong>exporting</strong></a> or <strong>deleting data</strong> are configured separately under <strong>Data leakage and loss</strong>. These alerts are triggered when another admin or regular user downloads an exported file or deletes data in Pipedrive. </p>
<p style="text-align: justify">You can set up email alerts for when the following occurs:</p>
<ul>
<li>User downloads exported deals, organizations, people, activities, or notes.</li>
<li>User deletes pipelines or stages</li>
<li>User deletes custom fields </li>
</ul>
<p style="text-align: justify"><br></p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-01_at_5.37.45_PM.png" alt="Screen_Shot_2020-04-01_at_5.37.45_PM.png" width="601" height="145"></figure>
<p style="text-align: justify"><br> For <strong>deals</strong>, <strong>people</strong> and <strong>organization</strong> deletions, you can configure the <strong>amounts</strong> of deletions so that the email alert only gets triggered once one user deletes a certain amount of that particular item. </p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-01_at_3.04.01_PM.png" alt="Screen_Shot_2020-04-01_at_3.04.01_PM.png" width="602" height="123"></figure>
<p style="text-align: justify">While each admin user can configure the alerts they individually want to receive, the amounts applied to the deal, people and organization deletion triggers will be applied <strong>company-wide</strong> and be overridden if another admin user resets the number. </p>
<ul>
<li>
<strong>Admin 1</strong>: Sets the deal deletion alert threshold to <strong>20 deals</strong> deleted and saves. </li>
<li>
<strong>Admin 2:</strong> Sets the deal deletion alert threshold to <strong>10 deals</strong> deleted and saves. </li>
<li>The number of deal deletions needed to trigger the alert set by admin 1 will now be overridden and reset to 10 for all admins who have that alert enabled.</li></ul>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-01_at_5.45.23_PM.png" alt="Screen_Shot_2020-04-01_at_5.45.23_PM.png"></figure>
<p style="text-align: justify"><br>The grouping and timing of the data leakage and loss alerts are configured separately from the account access alerts. You can choose for the alerts to send as <strong>separate emails, sent instantly</strong>, or <strong>all in one email sent at a specific time</strong>. </p>
<figure><img src="https://kb-cms.pipedriveassets.com/previewandenforce.png" alt="previewandenforce.png" width="600" height="176"></figure>
<hr>
<h2 style="text-align: justify">
<a name="preview-and-save-changes"></a>Preview and save changes </h2>
<p style="text-align: justify">Once you've configured your alerts, you can click on "<strong>Preview and save</strong>" to see an overview of your alert settings before saving. These alerts will only apply to the admin setting them up. </p>
<h2 style="text-align: justify"></h2><figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-01_at_6.18.21_PM.png" alt="Screen_Shot_2020-04-01_at_6.18.21_PM.png" width="601" height="384"></figure>
<p style="text-align: justify">The email alerts are configured to send out <strong>instantly</strong>:</p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-02_at_3.13.08_PM.png" alt="Screen_Shot_2020-04-02_at_3.13.08_PM.png" width="499" height="510"></figure>
<p style="text-align: justify">Email alerts configured to be sent at a <strong>specific time daily or weekly</strong>:</p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-02_at_3.04.35_PM.png" alt="Screen_Shot_2020-04-02_at_3.04.35_PM.png" width="500" height="559"></figure>
<hr>
<h2 style="text-align: justify">
<a name="viewing-alerts-in-the-security-dashboard-audit-log"></a>Viewing alerts in the security dashboard audit log</h2>
<p style="text-align: justify">All security alerts can be tracked by going to <strong>Security dashboard</strong><strong> &gt; Audit log &gt; <a href="/settings/security-dashboard/audit-log">Alerts</a>. </strong></p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-02_at_4.19.49_PM.png" alt="Screen_Shot_2020-04-02_at_4.19.49_PM.png" width="601" height="383"></figure>
<p style="text-align: justify"> </p>
<p style="text-align: justify">For the <strong>deleted deal</strong>, <strong>people</strong> and <strong>organization</strong> alerts and <strong>failed login attempts</strong>, you can click on the event to see a full list of the items deleted.</p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-04-02_at_5.49.50_PM.png" alt="Screen_Shot_2020-04-02_at_5.49.50_PM.png" width="700" height="235"></figure>

account-access-alerts

Account access alerts

data-leakage-and-loss

Data leakage and loss

preview-and-save-changes

Preview and save changes

viewing-alerts-in-the-security-dashboard-audit-log

Viewing alerts in the security dashboard audit log

<div class="support-note success primary"><strong>Note:</strong> The <strong>security dashboard</strong> feature is one of the many useful features of Pipedrive's Enterprise plan.</div>
<p>Pipedrive offers many easy-to-use security-related features to give you full transparency of when and how your data is being accessed. </p>
<p>If you already have the <strong><a href="https://support.pipedrive.com/en/article/single-sign-on" target="_blank" rel="noreferrer noopener">single sign-on</a></strong> feature enforced in your company account, you will not see the <a href="https://support.pipedrive.com/en/article/security-rules#C1IamCs" target="_blank" rel="noreferrer noopener">two-factor authentication</a>, <a href="https://support.pipedrive.com/en/article/security-rules#C2IamCs" target="_blank" rel="noreferrer noopener">Password strength</a> and <a href="https://support.pipedrive.com/en/article/security-rules#C3IamCs" target="_blank" rel="noreferrer noopener">Password expiration and reuse</a> options under the <strong><a href="https://support.pipedrive.com/en/article/security-rules" target="_blank" rel="noreferrer noopener">security rules</a></strong> feature. They are hidden under security rules because SSO is a more secure way of protecting data and, therefore, overrides these options. </p>
<p>The <strong>Advanced rules</strong> section will always be available under security rules regardless of whether SSO is enforced or not. </p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen_Shot_2020-01-20_at_2.53.26_PM.png" alt="Screen_Shot_2020-01-20_at_2.53.26_PM.png" width="601" height="394"></figure>
<p>If single sign-on is <strong>enabled in your account but not enforced</strong>, the <strong>2FA</strong>, <strong>Password strength</strong> and <strong>Password expiration and reuse</strong> sections will be available to be set up by a user with account settings access under security rules.<br></p>

Using SSO (single sign-on) with security rules

<div class="support-note primary">
<strong>Note:</strong> The <strong>single sign-on</strong> feature is one of the many useful features available for all Pipedrive plans.</div>
<p style="text-align: justify">If you have a big Sales team, you know the administrative pain of creating multiple new accounts every time someone joins your team.<br><br>To help you cut back onboarding time and overheads, we have <strong>single sign-on</strong> – or <strong>SSO.</strong></p>
<figure><img class="vidyard-player-embed" src="https://play.vidyard.com/sKGzqHumSa3bGztFQZLS1K.jpg" alt=""></figure>
<div class="support-note primary">
<strong>Note: </strong>If you’re just getting started with Pipedrive, check out our <strong>”</strong><strong>Get your team on board“</strong> <a href="https://learn.pipedrive.com/app/courses/8847bfbd-fb2b-440d-a7bb-24467515720f" target="_blank" rel="noreferrer noopener">Pipedrive Academy course</a>.</div>
<hr>
<h2 style="text-align: justify"><a name="setting-up-sso"></a>
Setting up SSO </h2>
<div class="support-note success primary"><strong>Note:</strong> Setting up SSO requires some technical expertise, so we suggest speaking to your internal IT teams for their assistance in providing the necessary information for SAML configuration.</div>
<p style="text-align: justify">An account with SSO enabled only requires <strong>one</strong> set of logins for <strong>all</strong> of your users. You can set up an account for them in your system and they'll automatically have login credentials for Pipedrive, saving your team time and effort.
<br></p>
<p style="text-align: justify">To configure SAML settings for single sign-on, account settings admin users can go to <strong>Company settings &gt; <a href="https://app.pipedrive.com/settings/sso" target="_blank" rel="noreferrer noopener">Single sign-on</a></strong> in their company Pipedrive account. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/sso%201.jpg" alt=""></figure>
<p style="text-align: justify">You'll need to enter several keys and certificates that your internal IT team should be able to provide. Once you‘ve tested the provided information and confirmed that it works, click <strong>“</strong><strong>Enable for users.”</strong> </p>
<p style="text-align: justify">The information will need to be copied over to your SSO provider. We have more information on how to set up SSO for the most popular SSO providers here: </p>
<ul><li><a href="https://support.pipedrive.com/en/article/pipedrive-single-sign-on-entra-id" target="_blank" rel="noreferrer noopener">SSO with Entra ID (formerly Azure AD)</a></li><li><a href="https://support.pipedrive.com/en/article/pipedrive-single-sign-on-okta" target="_blank" rel="noreferrer noopener">SSO with Okta</a></li></ul>
<div class="support-note success primary"><strong>Note: </strong>To disable password access to Pipedrive and rely on SSO alone, click <strong>“</strong><strong>Enforce SSO login.”</strong></div>
<hr>
<h2 style="text-align: justify"><a name="user-access"></a>User access</h2>
<p style="text-align: justify"><strong>Granting users access</strong><br></p>
<p style="text-align: justify">A user must be given access to Pipedrive in your SSO provider (e.g., Okta) settings before they can log in to Pipedrive using SSO. </p>
<p style="text-align: justify">If the user is already active in Pipedrive using the same email, a user verification flow will activate. <br></p>
<p style="text-align: justify"><strong>Logging in and logging out</strong></p>
<p style="text-align: justify">Go to your account's <strong><a href="http://app.pipedrive.com/auth/sso" target="_blank" rel="noreferrer noopener">settings</a></strong> to set up log in with <strong>single sign-on.</strong></p>
<div style="text-align: justify" class="support-note success primary"><strong>Note: </strong>Clicking <strong>”</strong><strong>Log out from Pipedrive“</strong> logs you out of Pipedrive, not your SSO provider.</div>
<hr>
<h2 style="text-align: justify"><a name="deactivating-a-user"></a>Deactivating a user </h2>
<p style="text-align: justify">When deactivating a Pipedrive user through your SSO system, keep the following things in mind:</p>
<ul>
<li>Deactivating a user disables their login credentials. If you don't intend to replace that user, make sure to remove the seat as well to avoid any unexpected charges on your invoice.</li>
<li>While the user's login credentials will be disabled, they can still access their account for up to thirty days if they remain logged in. To prevent any issues, we suggest asking users to log out of Pipedrive before <a href="https://support.pipedrive.com/en/article/how-can-i-deactivate-or-reactivate-a-user#C1IamCs" target="_blank" rel="noreferrer noopener">deactivating</a> them in both Pipedrive and your SSO provider.</li></ul>
<div class="support-note success primary"><strong>Note:</strong> The single sign-on feature does not work alongside Pipedrive's <a href="https://support.pipedrive.com/en/article/2fa-two-factor-authentication" target="_blank" rel="noreferrer noopener">two-factor authentication</a> function.</div>

setting-up-sso

Setting up SSO

user-access

User access

deactivating-a-user

Deactivating a user

<p>The added layer of security provided by <a href="https://support.pipedrive.com/en/article/2fa-two-factor-authentication" target="_blank" rel="noreferrer noopener">two-factor authentication</a> (2FA) also restricts the ability to effectively sync with some providers when using the email sync feature.<br><br>If you wish to sync your Outlook account to Pipedrive while still enabling two-factor authentication (2FA), Outlook recommends that you follow <a href="https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-app-passwords" target="_blank" rel="noreferrer noopener">these steps</a>.</p>

How can I sync Outlook when I have 2FA enabled?

<div class="support-note success primary"><strong>Note: </strong>This can only be set up by an admin user in both Microsoft Entra ID and Pipedrive.</div>
<p style="text-align: justify">Pipedrive’s<strong> <a href="https://support.pipedrive.com/en/article/single-sign-on">single sign-on (SSO)</a></strong> feature integrates with <a href="https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id" target="_blank" rel="noreferrer noopener">Microsoft Entra ID</a> (formerly Azure AD) to ensure that your team can access Pipedrive easily using your identity provider.</p>
<hr>
<p style="text-align: justify"><a name="C1"></a></p>
<h2 style="text-align: justify">Installing Pipedrive in Entra ID<a name="installing-pipedrive-in-entra-id"></a></h2>
<div class="support-note success primary"><strong>Note: </strong>For an in-depth guide to integrating Entra ID and Pipedrive, check out this <a href="https://learn.microsoft.com/en-us/entra/identity/saas-apps/pipedrive-tutorial" target="_blank" rel="noreferrer noopener">support page. </a></div>
<p style="text-align: justify">Start by going to your Entra ID account in Microsoft and selecting <strong>Identity &gt; Enterprise applications &gt; + New application.</strong></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/entra%201.jpg" alt=""></figure>
<p style="text-align: justify">From there, use the search bar to find <strong>Pipedrive</strong> and choose that option. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/entra%202.jpg" alt=""></figure>
<p style="text-align: justify">Then click <strong>”Create“ </strong>to add it to your enterprise applications. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/entra%203.jpg" alt=""></figure>
<div class="support-note success primary"><strong>Note: </strong>You can also rename your app connection during this step under <strong>Name. </strong><br></div>
<hr>
<h2 style="text-align: justify">Setting up SSO <a name="setting-up-sso"></a></h2>
<div class="support-note success primary"><strong>Note: </strong>You can also find your SSO options by going to your <strong>enterprise applications </strong>and selecting<strong> Pipedrive. </strong></div>
<p style="text-align: justify">After you add Pipedrive as an app, you’ll be redirected to a window with the details about your new connection. </p>
<p style="text-align: justify">From here, click <strong>”Single sign-on"</strong> and then select <strong>”SAML“ </strong>from the available options. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/entra%205.jpg" alt=""></figure>
<p style="text-align: justify">From there you can edit your configuration as needed. Any required fields will be marked in red, and you can use the <a href="https://learn.microsoft.com/en-gb/entra/identity/saas-apps/pipedrive-tutorial" target="_blank" rel="noreferrer noopener">configuration guide</a> to help with setting it up.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/entra%204.jpg" alt=""></figure>
<p style="text-align: justify">After you’ve configured your SAML, click <strong>”Test“</strong> at the bottom of the screen to confirm your connection. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Entra%206.jpg" alt=""></figure>
<p style="text-align: justify">If the connection works, you’ll be redirected to your Pipedrive account login screen where you can connect the account.</p>

Using Pipedrive single sign-on with Microsoft Entra ID

installing-pipedrive-in-entra-id

Installing Pipedrive in Entra ID

<div class="support-note success primary"><strong>Note: </strong>This integration can only be configured by the admin user in both Okta and your Pipedrive account.</div>
<p>Pipedrive's<strong> <a href="https://support.pipedrive.com/en/article/single-sign-on">single sign-on (SSO)</a></strong> feature integrates with Okta to ensure that your team can access Pipedrive easily using your identity provider.</p>
<hr>

<h2><a name="install-the-app"></a>Install the app</h2>
<p>To begin, install the Pipedrive app from your Okta administrator dashboard. An admin user can select <strong>Applications</strong>, search for <strong>Pipedrive </strong>and click "<strong>Add</strong>". </p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screen%20Capture%20on%202021-03-24%20at%2009-51-37.gif" alt="Okta start"></figure>
<p>Enter the subdomain of your Pipedrive account into the corresponding field before clicking "<strong>Next</strong>" to confirm. </p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screenshot%202021-03-24%20at%2010.00.10.png" alt="Okta Subdomain"></figure>
<p><br></p>
<hr>
<h2><a name="configuring-sso"></a>Configuring SSO</h2>
<p>Make sure to assign your users to Pipedrive from Okta before testing the single sign-on. Under "<strong>Applications</strong>", click the <strong>gear symbol</strong>, and "<strong>Assign to Users</strong>".</p>
<figure><img src="https://kb-cms.pipedriveassets.com/Assign%20to%20users.png" alt="Assign to users"></figure>
<p>To start configuring single sign-on, select "<strong>SAML 2.0</strong>" under <strong>Sign-on methods</strong> and click "<strong>View setup instructions</strong>".</p>
<figure><img src="https://kb-cms.pipedriveassets.com/Screenshot%202021-03-24%20at%2010.06.17.png" alt="SAML 2.0"></figure>
<p>On the <strong><a href="https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Pipedrive.html?base%5B%E2%80%A6%5Dadmin.okta.com&amp;app=pipedrive&amp;instanceId=0oacvzounNX8DAL7b5d6">Setup Instructions </a></strong><a href="https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Pipedrive.html?base%5B%E2%80%A6%5Dadmin.okta.com&amp;app=pipedrive&amp;instanceId=0oacvzounNX8DAL7b5d6">page</a>, you will find values for <strong>Issuer</strong>, <strong>Single sign-on</strong><strong> (SSO) URL</strong> and <strong>X.509 certificate</strong> that you need to enter in your Pipedrive <a href="http://app.pipedrive.com/settings/sso">SSO settings page.</a> Your Pipedrive SSO settings page can be found by going to <strong>Settings &gt; security center &gt; <a href="https://app.pipedrive.com/settings/sso">Single sign-on</a></strong>.</p>
<p>You can copy and paste all of these fields directly to their corresponding fields in Pipedrive. </p>
<figure style="max-width:570px;"><img src="https://kb-cms.pipedriveassets.com/Markup%202021-03-24%20at%2010.42.34.png" alt="Okta SSO blur" width="570" height="632"></figure>
<figure style="max-width:571px;"><img src="https://kb-cms.pipedriveassets.com/Markup%202021-03-24%20at%2010.39.24%20%281%29.png" alt="SSo PD" width="571" height="485"></figure>
<hr>
<h2><a name="testing-the-sso-setup"></a>Testing the SSO setup</h2>
<p>Once you have copied and pasted the values, click "<strong>Save and test</strong>". If everything has been configured correctly, you should see a success message.</p>
<figure style="max-width:596px;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202021-03-24%20at%2010.52.45.png" alt="SSO success" width="596" height="65"></figure>
<p>You can then enable SSO for your users by clicking the toggle at the bottom of the page.</p>
<figure><img src="https://kb-cms.pipedriveassets.com/Enable%20for%20users.png" alt="Enable for users"></figure>

Using Pipedrive single sign-on (SSO) with Okta

install-the-app

Install the app

configuring-sso

Configuring SSO

testing-the-sso-setup

Testing the SSO setup

Security features

<p style="text-align: justify">Have you ever wondered how the data in Pipedrive is stored and how reliable the backups are? If you have, keep reading:<br></p>
<ul>
<li>
<strong>Pipedrive has database replicas that sync the databases in real time</strong>. This means that, if something should happen to one of the main database machines, the backup can be switched to quickly ensure continuity of service and no loss of data.</li>
<li>
<strong>Pipedrive conducts nightly complete backups of all the database machines</strong>. These backups can be used to recover data in the event of data corruption. This is used in the event that the database machines are intact, but the data has somehow been corrupted in both the main machines and the replicas.</li>
<li>
<strong>Pipedrive also creates nightly backup files of all the customer databases, encrypts them and stores them securely off-site</strong>.<strong><strong><strong><br>
</strong></strong></strong></li>
</ul>
<hr>
<h2>How can I create a data backup?<a name="how-can-i-create-a-data-backup"></a></h2><div class="support-note success primary"><strong>Note:</strong> This action is only available to users with export permissions enabled.</div>
<p style="text-align: justify">To create a local Pipedrive data backup, simply go to <strong>Tools and apps</strong><strong> &gt;</strong><strong> <a href="https://app.pipedrive.com/settings/export" target="_blank" rel="noreferrer noopener">Export data</a></strong> from the left sidebar menu.</p>
<p style="text-align: justify">From there, generate a spreadsheet of the information you wish to export and then download it to your computer.</p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/export%20data%20menu.png" alt=""></figure>
<hr><h2>For how long is my information stored after I close my account?<br><a name="for-how-long-is-my-information-stored-after-i-close-my-account"></a></h2><h3>Paid Pipedrive accounts<a name="paid-pipedrive-accounts"></a></h3>

<p>When a paid Pipedrive account is closed, the account and its data are scheduled for permanent deletion within <strong>180 days</strong> of the date of closure.</p><h3>Free trial accounts<a name="free-trial-accounts"></a></h3>
<p>In the case of free trial accounts, they’re scheduled for permanent deletion within <strong>60 days</strong> of the date of closure.<strong><br></strong></p><div class="support-note success primary"><strong>Note:</strong> See <a title="https://www.pipedrive.com/en/privacy#data-retention:~:text=from%20our%20systems.-,9.%20Data%20Retention,-We%20will%20retain" href="https://www.pipedrive.com/en/privacy#data-retention:~:text=from%20our%20systems.-,9.%20Data%20Retention,-We%20will%20retain">Section 9</a> of our <strong>Privacy Notice</strong> for more information.<br></div>

How is data backed up in Pipedrive?

how-can-i-create-a-data-backup

How can I create a data backup?

for-how-long-is-my-information-stored-after-i-close-my-account

paid-pipedrive-accounts

Paid Pipedrive accounts

free-trial-accounts

Free trial accounts

For how long is my information stored after I close my account?

<h2>Separate databases, full encryption<a name="separate-databases-full-encryption"></a></h2>
<p style="text-align: justify">Each company’s data in Pipedrive is stored in a separate database. This avoids any risk of unwanted leaks into another company’s database.</p>
<p style="text-align: justify">The Pipedrive application employs only secure HTTPS connections, where all information is encrypted.<br></p>
<hr>
<h2 style="text-align: justify">Daily backups and backups of backups<a name="daily-backups-and-backups-of-backups"></a></h2>
<p style="text-align: justify">We store backups of your important data, so we can restore your information upon request. All backups of Pipedrive data – no matter where you are – are done through Amazon Web Services. This means your data is safely stored around the globe every day.</p>
<p style="text-align: justify">Read more about our backup systems in <a href="https://support.pipedrive.com/en/article/how-is-data-backed-up-in-pipedrive" target="_blank" rel="noreferrer noopener">this article</a>.</p>
<hr>
<h2 style="text-align: justify">World-class infrastructure<a name="world-class-infrastructure"></a></h2>
<p>We currently host our data in the following AWS regions:<br></p>
<ul><li>EU (Frankfurt)</li><li>EU (Dublin)</li><li>UK (London)</li><li>US East</li><li>US West</li></ul>
<p>For optimized performance and compliance, new sign-ups originating from specific regions will primarily be hosted in specific data centers:</p>
<ul><li>EU: for EU clients</li><li>UK: for non-EU European and EMEA clients</li><li>US: rest of the world.</li></ul>
<div class="support-note success primary"><strong>Note: </strong>Due to external conditions (e.g., IP mappings), company accounts can be hosted in different data centers. If you would like to know exactly where your company’s data is hosted, please <a href="https://support.pipedrive.com/contact-us" target="_blank" rel="noreferrer noopener">reach out to our Support team</a>.</div>
<hr>
<h2 style="text-align: justify">Perfect privacy<a name="perfect-privacy"></a></h2>
<p style="text-align: justify">Your sales data is important and should belong to you and you alone. Pipedrive will not have any knowledge or control over the categories or nature of the data you uploaded into your account. We will only process your sales data as directed by you or as outlined in our <a href="https://www.pipedrive.com/en/terms-of-service" target="_blank" rel="noreferrer noopener">Terms of Service</a>.</p>

How secure is my data in Pipedrive?

separate-databases-full-encryption

Separate databases, full encryption

daily-backups-and-backups-of-backups

Daily backups and backups of backups

world-class-infrastructure

World-class infrastructure

perfect-privacy

Perfect privacy

<p style="text-align: justify">25 May 2018 marks the start of enforcement of the <a href="http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679" target="_blank" rel="noreferrer noopener">European Union's General Data Protection Regulation</a>. This new legislation has significantly impacted anyone whose business involves handling personal data about EU residents or within the EU. Naturally, personal data is at the core of working in sales, so Pipedrive and our users have also been busy making sure that we are compliant.<br><br>This article provides an overview of the data-related roles and responsibilities when you’ve chosen Pipedrive as your CRM platform and will explain Pipedrive’s efforts to live up to the values and requirements of the GDPR.</p>
<hr>
<h2 style="text-align: justify">
<a name="pipedrive-as-the-data-processor"></a>Pipedrive as the data processor</h2>
<p style="text-align: justify">The people you store in Pipedrive as contacts are your data subjects, and you are considered the data controller for this personal data. In our <a href="https://www.pipedrive.com/en/terms-of-service" target="_blank" rel="noreferrer noopener">Terms of Service</a> and <a href="https://www.pipedrive.com/en/privacy" target="_blank" rel="noreferrer noopener">Privacy Policy</a>, we refer to this data as <strong>client data</strong>. <br><br>Using the Pipedrive app to manage your customers means that you have engaged Pipedrive as a data processor to carry out certain processing activities on your behalf.</p>
<p style="text-align: justify">According to article 28 of the GDPR, the relationship between the controller and the processor needs to be made in writing (electronic form is acceptable under subsection (9) of the same article). </p>
<p style="text-align: justify">This is where our <a href="https://www-cms.pipedriveassets.com/documents/Complete_with_Docusign_DPA_Pipedrive_March.pdf" target="_blank" rel="noreferrer noopener">Data Processing Addendum (DPA)</a>, <a href="https://www.pipedrive.com/en/terms-of-service" target="_blank" rel="noreferrer noopener">Terms of Service</a> and <a href="https://www.pipedrive.com/en/privacy" target="_blank" rel="noreferrer noopener">Privacy Policy</a> come in. These three documents serve as your <strong>data processing contract,</strong> setting out the instructions that you’re giving to Pipedrive about processing the personal data you control and establishing the rights and responsibilities of both parties. Pipedrive will only process your client data based on your instructions as the data controller. </p>
<p style="text-align: justify">Lastly, it is crucial to check Section 14.1 of our <a href="https://www.pipedrive.com/en/terms-of-service" target="_blank" rel="noreferrer noopener">Terms of Service</a> to see which Pipedrive entity is your contractual partner.</p>
<p style="text-align: justify">All EU customers have a contractual relationship with our EU entity, based in Estonia.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="data-transfers"></a>Data transfers</h2>
<p style="text-align: justify">One topic that often comes up with customers is data transfers outside the EEA.</p>
<p style="text-align: justify">The GDPR establishes strict requirements for moving data outside its protection scope. This is only natural – otherwise, it would be impossible for the law to fulfill its purpose.<br><br>Who is responsible for meeting these data transfer requirements? As our EU customers have a legal relationship with our EU entity, this data transfer remains within the EEA. However, if Pipedrive subsequently engages sub-processors outside the EEA, it is our job to ensure that we transfer the data lawfully.<br><br>We’ll keep an up-to-date list of sub-processors in our <a href="https://www.pipedrive.com/en/subprocessors" target="_blank" rel="noreferrer noopener">Sub-processors page</a> to be fully transparent about these transfers. This list will also explain what data is involved and how we have ensured that the data is adequately protected even after it leaves the EEA.</p>
<p style="text-align: justify">We do this by ensuring that our third-party service providers have either certified under the EU-US Data Privacy Framework or signed the EU Commission’s standard contractual clauses for data transfers with us.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="pipedrive-as-the-data-controller"></a>Pipedrive as the data controller</h2>
<p style="text-align: justify">Additionally, Pipedrive acts as the data controller for the personal data we collect about you, the user of our web app, mobile apps and website.</p>
<p style="text-align: justify">First and foremost, we process data that is necessary for us to perform our contract with you (GDPR Article 6(1)(b)).</p>
<p style="text-align: justify">Secondly, we process data to meet our obligations under the law (GDPR Article 6(1)(c)) – this primarily involves financial data and information that we need to meet our accountability obligations under the GDPR.</p>
<p style="text-align: justify">Thirdly, we process your personal data for our legitimate interests in line with GDPR Article 6(1)(f).<br><br>What are these “legitimate interests” we talk about?</p>
<ul>
<li>Improving the app to help you reach new levels of productivity</li>
<li>Making sure that your data and Pipedrive’s systems are safe and secure</li>
<li>Responsible marketing of our product and its features<br></li>
</ul>
<p style="text-align: justify">Hopefully, this helps you to navigate the EU’s data protection requirements better. If you have any questions concerning the above, you’re welcome to reach out to us at <a href="https://pipedrive.com" target="_blank" rel="noreferrer noopener">support@pipedrive.com</a>, and we’ll do our best to explain things further.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="what-is-pipedrive-doing-for-the-gdpr"></a>What is Pipedrive doing for the GDPR?</h2>
<p style="text-align: justify">As a company with roots in Europe, Pipedrive is very much up to speed with the implications that the EU General Data Protection Regulation has for businesses.</p>
<p style="text-align: justify">We appreciate the privacy needs of Pipedrive users as well as their customers and, as such, have implemented – and will continue to improve – technical and organizational measures in line with the GDPR to safeguard the personal data processed by Pipedrive.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="internal-processes-security-and-data-transfers"></a>Internal processes, security and data transfers</h2>
<p style="text-align: justify">A large part of GDPR compliance is ensuring that procedures are in place and data processes are mapped and auditable. Therefore, we have added elements to our application development cycle to build features following the principles of <strong>Privacy by Design</strong>.</p>
<p style="text-align: justify">Any access to the client data that we process on your behalf is strictly limited. Our internal procedures and logs ensure that we meet the GDPR accountability requirements in this regard.<br><br>We have established a process for onboarding third-party service providers and adopting tools that ensure that these third parties meet the high expectations that Pipedrive and its customers have regarding privacy and security.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="readiness-to-comply-with-subject-access-requests"></a>Readiness to comply with subject access requests</h2>
<p style="text-align: justify">Data subjects’ ownership of their personal data is at the heart of the GDPR. We are therefore ready to respond to data subject requests to delete, modify, or transfer their data.</p>
<p style="text-align: justify">This means our customer support specialists and the engineers that assist them are well-prepared to help you in any matters involving your personal data, in addition to providing the fantastic customer support experience you’re accustomed to.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="documentation"></a>Documentation</h2>
<p style="text-align: justify">Our <a href="https://www.pipedrive.com/en/terms-of-service" target="_blank" rel="noreferrer noopener">Terms of Service</a> and <a href="https://www.pipedrive.com/en/privacy" target="_blank" rel="noreferrer noopener">Privacy Policy</a> are constantly revised to increase transparency and ensure the documents meet GDPR requirements. As these are the basis for our relationship with you, we must comprehensively and openly explain our commitments and your rights in these documents.</p>
<p style="text-align: justify">Additionally, we’re constantly mapping all our data processing activities to be able to comply with the GDPR accountability requirements.<br></p>
<hr>
<h2 style="text-align: justify">
<a name="training"></a>Training</h2>
<p style="text-align: justify">All of the above is supported by extensive training efforts within the company, ensuring the GDPR-compliant processes we’ve put in place are followed. For example, data privacy and security sessions are an integral part of our onboarding process, and each department receives training tailored to their work involving personal data.<br><br><strong>Pipedrive is firmly convinced that meeting GDPR requirements is much more than just checking off boxes in a list. For us, GDPR represents a lifestyle of respect for individuals' privacy and responsibility in handling personal data.</strong></p>

Pipedrive and GDPR

pipedrive-as-the-data-processor

Pipedrive as the data processor

data-transfers

Data transfers

pipedrive-as-the-data-controller

Pipedrive as the data controller

what-is-pipedrive-doing-for-the-gdpr

What is Pipedrive doing for the GDPR?

internal-processes-security-and-data-transfers

Internal processes, security and data transfers

readiness-to-comply-with-subject-access-requests

Readiness to comply with subject access requests

documentation

Documentation

training

Training

Keep your data safe after deactivating or deleting a user from your Pipedrive account.

<p dir="ltr" style="text-align: justify">In Pipedrive, there are two ways to remove active users from your company account:<br></p>
<ul><li dir="ltr"><p dir="ltr" style="text-align: justify"><strong>Deactivating</strong> a user frees up the seat, allowing you to invite a new user or remove it from the subscription. Deactivating keeps the user’s personal data (like name and email) in the company account.</p></li><li dir="ltr"><p dir="ltr" style="text-align: justify"><strong>Deletion</strong>, on the other hand, completely deletes user details (like their name and email address) from the company account. This action can only be performed after deactivating a user.</p></li></ul>
<p style="text-align: justify">Before deactivating a user, you’ll see a prompt with the data the user in question owns. We recommend reassigning the data if it’s still relevant.</p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Modal%20window.png" alt=""></figure>
<p style="text-align: justify">Learn how to deactivate a user in <a href="https://support.pipedrive.com/article/how-can-i-deactivate-or-reactivate-a-user" target="_blank" rel="noreferrer noopener">this article</a>.</p>
<div dir="ltr" class="support-note warning"><strong>Note:</strong> Deactivation and deletion of users are only available to users with account settings access. Before proceeding with user deactivation and deletion, note that these actions may impact created content and owned items associated with the user. We recommend reassigning the data before deactivating and deleting users.</div>
<hr>
<h2 style="text-align: justify">Deactivated users<a name="deactivated-users"></a></h2>
<p dir="ltr" style="text-align: justify">When a user is deactivated, the following changes to their data occur:<br></p>
<p style="text-align: justify"><strong>User information</strong></p>
<ul><li>The deactivated user’s name, email, and profile picture remain in your company account, and you can access the deactivated user overview by navigating to <strong><a href="https://app.pipedrive.com/settings/users" target="_blank" rel="noreferrer noopener">Manage users</a> &gt; Deactivated </strong>and<strong> (...) &gt; User overview </strong>on the right-hand side of the screen.</li></ul>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Users%20and%20access.png" alt=""></figure>
<p style="text-align: justify"><strong>Item ownership</strong></p>
<ul><li>Leads, deals, contacts, products, activities, projects, and project tasks remain under the deactivated user’s name unless the ownership is transferred</li></ul>
<p style="text-align: justify"><strong>Notes and Files</strong></p>
<ul><li>Notes, comments and files remain under the deactivated user’s name </li></ul>
<p style="text-align: justify"><strong>Emails</strong></p>
<ul><li>Email sync is automatically discontinued</li><li>Shared email templates created by the deactivated user and emails linked to entities remain in the deactivated user’s account</li><li>Private emails linked to entities are deleted after 30 days</li></ul>
<p style="text-align: justify"><strong>Meeting scheduler</strong></p>
<ul><li>The public meeting scheduler link expires after user deactivation</li></ul>
<p style="text-align: justify"><strong>Account syncs</strong></p>
<ul><li>Email sync, contact sync, calendar sync and Google Drive sync are automatically discontinued</li></ul>
<p style="text-align: justify"><strong>Filters</strong></p>
<ul><li>Public filters created by deactivated users remain in the deactivated user’s account</li><li>Existing filter conditions with deactivated users are kept, but new ones can’t be created</li></ul>
<p style="text-align: justify"><strong>Insights</strong></p>
<ul><li>Shared dashboards are automatically transferred to the first admin of the company account</li><li>Public links to dashboards created by the deactivated user are automatically disabled</li><li>Shared reports with other users in the company become inaccessible</li><li>Deactivated users are included in reports and goals if they were initially part of them</li><li>You can create new filters in Insights that include deactivated users as filter conditions</li></ul>
<div class="support-note success primary"><strong>Note:</strong> We recommend transferring report ownership before deactivating the user.</div>
<p dir="ltr" style="text-align: justify"><strong>LeadBooster add-on</strong></p>
<ul><li><strong>Live Chat:</strong> the deactivated user is unassigned from chats, allowing other operators to take over</li><li><strong>Chatbot</strong><strong>:</strong> in the playbook editor, another user automatically replaces the deactivated user. We recommend reviewing the email address in the playbook editor, mainly if a custom email was previously used there.</li><li><strong>Webforms:</strong> in the Webform saving preferences, another user automatically replaces the deactivated user. We recommend reviewing the email address in the saving preferences, mainly if a custom email was previously used there.</li></ul>
<p dir="ltr" style="text-align: justify"><strong>Smart Docs</strong></p>
<ul><li><strong>Documents:</strong> to view and edit a document created by deactivated users, you need to access the cloud storage folder where the document is hosted (<a href="https://support.pipedrive.com/article/where-are-my-documents-stored" target="_blank" rel="noreferrer noopener">read more</a>)</li><li><strong>Templates:</strong> to view and use Smart Docs templates created by deactivated users, the template owner must grant permission in Pipedrive before they’re deactivated. You’ll also need access to the cloud storage folder where the template is hosted.</li><li><strong>eSignatures:</strong> you can access documents sent for signing by deactivated users as long as you have permission to view the deal in which it was created</li></ul>
<p dir="ltr" style="text-align: justify"><strong>DocuSign integration</strong></p>
<ul><li>You can access the documents that were sent for signing by deactivated users</li></ul>
<p dir="ltr" style="text-align: justify"><strong>Quickbooks integration</strong></p>
<ul><li> Invoices created by deactivated users are accessible if another user connects to Quickbooks</li></ul>
<p dir="ltr" style="text-align: justify"><strong>Campaigns</strong></p>
<ul><li>Scheduled campaigns created by a deactivated user will be sent as per the original schedule</li></ul>
<div dir="ltr" class="support-note success primary"><strong>Note:</strong> We recommend reviewing all automations responsible for triggering automated campaign sending if the user who created or with whom the automation is shared becomes deactivated. Further details about the behavior of automations can be found below.</div>
<p dir="ltr" style="text-align: justify"><strong>Automations</strong></p>
<ul><li>If the owner of an automation is deactivated, the automation will be deactivated. We recommend transferring any automation ownership with the trigger setting <code>Triggered by anyone</code>.</li><li>If an automation has the trigger setting <code>Triggered by selected users</code> and a user that triggers the automation is deactivated, the automation will continue to be active and won’t impact the rest of the users.</li><li>If the automation is set to trigger based on any user and one of the users is deactivated, the automation will continue to be active and the deactivated user will automatically be excluded from the automation</li></ul>
<div><strong>Automatic assignment</strong></div>
<ul><li>If a deactivated user is part of an assignment rule, the rule will continue to run but will fail when checking the user’s status. We recommend reviewing all active automatic assignment rules that include the deactivated user (<a href="https://support.pipedrive.com/article/automatic-assignment" target="_blank" rel="noreferrer noopener">read more</a>).</li></ul>
<p dir="ltr" style="text-align: justify"><strong>Marketplace apps</strong></p>
<ul><li>Installed apps by the deactivated user are automatically uninstalled</li><li>If the deactivated user had an admin role, then all shared Marketplace apps are uninstalled</li></ul>
<p dir="ltr" style="text-align: justify"><strong>Webhooks</strong></p>
<ul><li>Webhooks created by deactivated users are automatically deactivated</li></ul>
<hr>
<h2 style="text-align: justify">Deleted users<a name="deleted-users"></a></h2>
<p style="text-align: justify">In addition to the above, when users are deleted, the following data is impacted:</p>
<p style="text-align: justify"><strong>User information</strong></p>
<ul><li>The user’s name, email and profile picture are removed from the company account. Displayed as <code>deleted user</code> or <code>deleted user, IDxxxxxxxx</code>.</li></ul>
<p style="text-align: justify"><strong>Content ownership</strong></p>
<ul><li>Leads, deals, contacts, products, activities, projects, and project tasks remain, still assigned to the deleted user unless ownership is transferred before user deletion.</li></ul>
<p style="text-align: justify"><strong>Filtering</strong></p>
<ul><li>Deleted users can’t be filtered. Ownership transfer is recommended before deletion.</li></ul>
<div class="support-note success primary"><strong>Note:</strong> Only deactivated users can be deleted from the company account.<br></div>

What happens with the data when a user is deactivated or deleted?

deactivated-users

Deactivated users

deleted-users

Deleted users

<div class="support-note primary">
<strong>Note:</strong> Each user can have up to three devices logged into the same account.</div>
<p style="text-align: justify">Pipedrive accounts contain valuable information, so Pipedrive automatically logs you out after a certain period of inactivity.</p>
<p>To remain logged in for a longer period of time, check the <strong>“</strong><strong>Remember me</strong><strong>”</strong> option when you log in.</p>
<p>Pipedrive login sessions last for thirty days if: </p>
<ul><li><strong>”Remember me“</strong> is checked when you log in</li><li>You use Google to remember your login</li><li>You use an <a href="https://support.pipedrive.com/article/single-sign-on" target="_blank" rel="noreferrer noopener">SSO</a> tool</li></ul>
<p style="text-align: justify">Otherwise, login sessions last for twelve hours. </p>
<p style="text-align: justify">However, you don‘t need to worry about being logged out in the middle of your work. Pipedrive keeps you logged in and extends your session if you’re active on the account. </p>
<div class="support-note primary">
<strong>Note:</strong> To help maintain the overall security of your Pipedrive account, check your <a href="https://support.pipedrive.com/en/article/how-can-i-log-myself-out-of-pipedrive-on-my-connected-devices" target="_blank" rel="noreferrer noopener">active device login sessions</a> and <a href="https://support.pipedrive.com/en/article/how-can-i-see-which-devices-i-have-used-to-access-pipedrive" target="_blank" rel="noreferrer noopener">device login history</a> for unusual activity.</div>

Why does Pipedrive log me out?

<p style="text-align: justify">When using Pipedrive lead generation features like <a href="https://support.pipedrive.com/article/chatbot" target="_blank" rel="noreferrer noopener">Chatbot</a> and <a href="https://support.pipedrive.com/article/web-forms" target="_blank" rel="noreferrer noopener">Web Forms</a> and our paid add-on <a href="https://support.pipedrive.com/article/web-visitors-feature" target="_blank" rel="noreferrer noopener">Web Visitors</a>, certain cookies are used to provide the best experience for you and your customers.</p>
<p style="text-align: justify">These cookies are <strong>essential</strong> and can’t be omitted.</p>
<p style="text-align: justify">Furthermore, in order to provide you with the engagement statistics on the dashboard and allow troubleshooting on our end, we track certain events for Chatbot and Web Forms via a <strong>tracking script</strong>.</p>
<hr>
<h2 style="text-align: justify">What cookies are used when using our lead generation features?<a name="what-cookies-are-used-when-using-our-lead-generation-features"></a></h2>
<h3 style="text-align: justify">Chatbot and Web Forms protection<a name="chatbot-and-web-forms-protection"></a></h3>
<p style="text-align: justify">Both Chatbot and embedded Web Forms load a single Cloudflare cookie <code>__cf_bm</code>. This helps to identify and mitigate automated traffic and protect our infrastructure.</p>
<p style="text-align: justify">This cookie is attached to Pipedrive’s domain.<br></p>
<table><tbody><tr><td><div style="text-align: justify"><strong>Service creating the cookie</strong></div></td><td><div style="text-align: justify">Chatbot and Web Forms</div></td></tr><tr><td><div style="text-align: justify"><strong>Cookie name</strong></div></td><td><div style="text-align: justify"><code>__cf_bm</code></div></td></tr><tr><td><div style="text-align: justify"><strong>Cookie type</strong></div></td><td><div style="text-align: justify">Third-party</div></td></tr><tr><td><div style="text-align: justify"><strong>Expiration</strong></div></td><td><div style="text-align: justify">1 hour</div></td></tr><tr><td><div style="text-align: justify"><strong>Purpose</strong></div></td><td><div style="text-align: justify">Set by Cloudflare – bot protection</div></td></tr></tbody></table>
<div class="support-note success primary"><strong>Note:</strong> You can find more information about <code>__cf_bm</code> cookie in Cloudflare documentation <a href="https://developers.cloudflare.com/fundamentals/get-started/cloudflare-cookies/" target="_blank" rel="noreferrer noopener">here</a>.</div>
<h3 style="text-align: justify">Web Forms reCAPTCHA<br><a name="web-forms-re-captcha"></a></h3>
<p style="text-align: justify">When creating new Web Forms or editing the existing ones, you can choose whether the form is spam-protected or not.</p>
<p style="text-align: justify">When Spam Protection is enabled for Web Forms, we use Google reCAPTCHA, which adds a <code>_GRECAPTCHA</code> cookie to provide risk analysis.<br></p>
<table><tbody><tr><td><div style="text-align: justify"><strong>Service creating the cookie</strong></div></td><td><div style="text-align: justify">Web Forms</div></td></tr><tr><td><div style="text-align: justify"><strong>Cookie name</strong></div></td><td><div style="text-align: justify"><code>_GRECAPTCHA</code></div></td></tr><tr><td><div style="text-align: justify"><strong>Cookie type</strong></div></td><td><div style="text-align: justify">Third-party</div></td></tr><tr><td><div style="text-align: justify"><strong>Expiration</strong></div></td><td><div style="text-align: justify">179 days</div></td></tr><tr><td><div style="text-align: justify"><strong>Purpose</strong></div></td><td><div style="text-align: justify">Sent by Google reCAPTCHA when Web Forms spam protection is enabled. When spam protection is not enabled, the cookie won’t be loaded.</div></td></tr></tbody></table>
<div class="support-note success primary"><strong>Note:</strong> You can find more information about <code>_GRECAPTCHA</code> cookie in Google’s FAQ <a href="https://developers.google.com/recaptcha/docs/faq#does-recaptcha-use-cookies" target="_blank" rel="noreferrer noopener">here</a>.</div>
<h3 style="text-align: justify">Web Visitors<br><a name="web-visitors"></a></h3>
<p style="text-align: justify">When adding a tracking script to your website to collect visitor information, Dealfront sets <code>_lfa</code> and <code>_lfa_expiry</code> cookie to track all website visits. In addition, if the Pipedrive/Dealfront customer has configured the consent manager it will create the <code>_lfa_consent</code> cookie to keep track of what the visitor has answered to the consent dialog.</p>
<p style="text-align: justify">The visitor might also see traces of the <code>_lfa_test_cookie_stored</code> as it’s used to check if cookies are enabled or not.<br></p>
<table><tbody><tr><td><div style="text-align: justify"><strong>Service creating the cookie</strong></div></td><td><div style="text-align: justify">Web Forms</div></td></tr><tr><td><div style="text-align: justify"><strong>Cookie name</strong></div></td><td><div style="text-align: justify"><code>_lfa</code></div></td></tr><tr><td><div style="text-align: justify"><strong>Cookie type</strong></div></td><td><div style="text-align: justify">First-party</div></td></tr><tr><td><div style="text-align: justify"><strong>Expiration</strong></div></td><td><div style="text-align: justify">1 year</div></td></tr><tr><td><div style="text-align: justify"><strong>Purpose</strong></div></td><td><div style="text-align: justify">Set by Dealfront script to track website visits</div></td></tr></tbody></table>
<p style="text-align: justify"></p>
<table><tbody><tr><td><div style="text-align: justify"><strong>Cookie name</strong></div></td><td><div style="text-align: justify"><code>_lfa_expiry</code></div></td></tr><tr><td><div style="text-align: justify"><strong>Cookie type</strong></div></td><td><div style="text-align: justify">First-party</div></td></tr><tr><td><div style="text-align: justify"><strong>Purpose</strong></div></td><td><div style="text-align: justify">Set by Dealfront script to track website visits. A local storage variable to store the duration for the Dealfront <code>clientID</code> stored in browser <code>LocalStorage</code></div></td></tr></tbody></table>
<div class="support-note success primary"><strong>Note:</strong> You can find more information about these cookies on Dealfront’s page <a href="https://help.dealfront.com/en/articles/3700007-what-is-the-leadfeeder-tracker" target="_blank" rel="noreferrer noopener">here</a>. According to Dealfront, customers who will have their existing Dealfront accounts connected have the ability to configure cookies on their settings page inside Dealfront.<br></div>
<hr>
<h2>Chatbot and Web Forms event tracking<a name="chatbot-and-web-forms-event-tracking"></a></h2>
<p style="text-align: justify">In order to provide you with the engagement statistics for Chatbot and Web Forms on the feature dashboard and to allow troubleshooting from our end, certain events and end users’ engagement with those features are tracked via a <strong>tracking script</strong>.</p>
<p style="text-align: justify">When doing so, the <strong>tracking script</strong> collects the following information: <code>webformId</code>, <code>embedded (true/false)</code>, <code>URL</code> and <code>type of interaction (viewed/interacted)</code>.</p>
<p style="text-align: justify"><strong>No information about the end user or their device is collected</strong>, except for <code>User Agent</code> which is, however, not used by us in any way, whether to identify end users or otherwise.</p>
<p style="text-align: justify">We also use the features’ engagement information for our own analytical purposes. Nonetheless, we do so only in aggregate form and not in a manner that would identify any end users.</p>
<p style="text-align: justify">The tracking script is always used with the Chatbot and Web Form features.</p>
<p style="text-align: justify">End users can block Java Script and tracking in most browsers. That said, the Chatbot and Web Form features can’t be used in such cases.</p>

Chatbot, Web Forms and Web Visitors cookies and other tracking technologies

what-cookies-are-used-when-using-our-lead-generation-features

chatbot-and-web-forms-protection

Chatbot and Web Forms protection

web-forms-re-captcha

Web Forms reCAPTCHA

web-visitors

Web Visitors

What cookies are used when using our lead generation features?

chatbot-and-web-forms-event-tracking

Chatbot and Web Forms event tracking

Data security in Pipedrive

<div dir="ltr" style="text-align: justify" class="support-note success primary"><strong>Note: </strong>Selecting an existing account with a saved password will automatically log you in.</div>
<p dir="ltr" style="text-align: justify">You can save time by logging in to your Pipedrive account using your Google profile. To do this, select the option on the sign-in screen.</p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-01-29%20at%2017.01.33.png" alt=""></figure>


<p dir="ltr" style="text-align: justify">Then choose an account you’ve logged in with, or click <strong>“Use another account”</strong> and manually submit your email address. </p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-01-29%20at%2017.02.png" alt=""></figure>

<p dir="ltr" style="text-align: justify">After you select your login email, you’ll need to input your email account password. </p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202024-01-29%20at%2018.09.27.png" alt=""></figure>

<p dir="ltr" style="text-align: justify">If you’re logging in using a new email or one you haven’t accessed for a while, you’ll need to verify your password. </p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202023-01-26%20at%208.50.42%20AM.png%23asset_36450_url.png" alt=""></figure>

Logging into Pipedrive using Google

<div class="support-note primary">
<strong>Note:</strong> Each user can have up to three devices logged in to the same user account. </div>
<p style="text-align: justify">When you have a database of valuable information in Pipedrive, you’ll want to make sure that it stays secure. To make sure that your account is only being accessed by devices that you know, you should regularly monitor the <strong>Device history</strong> of your Pipedrive user account.</p>
<p style="text-align: justify">To access this information, go to <strong>Settings &gt; Dashboard &gt; <a href="https://app.pipedrive.com/settings/security-dashboard/device-history" target="_blank" rel="noreferrer noopener">Device history</a></strong> in your Pipedrive account.</p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202023-06-21%20at%2015.25.png" alt=""></figure>
<p style="text-align: justify">In this area, you will see a list of the devices used to access your Pipedrive user account.</p>
<p style="text-align: justify">You’ll be able to see exactly what kind of device was used to access Pipedrive and the location and IP address used when accessing the account. Additionally, you’ll be able to see when and how the login occurred and when and how that login session was completed.</p>
<p style="text-align: justify">If needed, this information can be exported into a spreadsheet – either in <strong>.xlsx</strong> or <strong>.csv</strong> format – for your convenience.</p>
<p style="text-align: justify">If you feel that your Pipedrive user account is being accessed by unauthorized devices, you may wish to forcibly log those devices out. Learn how to log out of other devices <a href="https://support.pipedrive.com/en/article/how-can-i-log-myself-out-of-pipedrive-on-my-connected-devices" target="_blank" rel="noreferrer noopener">here</a>. Once logged out, you may wish to change your Pipedrive password to secure your account. </p>

<p>Learn more about changing your password in <a href="https://support.pipedrive.com/en/article/how-can-i-change-or-reset-my-password" target="_blank" rel="noreferrer noopener">this article</a>.</p>

How can I see which devices I have used to access Pipedrive?

<div class="support-note primary">
<strong>Note:</strong> Each user can have up to three devices logged into the same user account. </div>
<p style="text-align: justify">In this internet-connected age, there are many ways to access your precious Pipedrive data. To ensure that your account is only being accessed by devices you know, you should regularly monitor the <strong>Active devices</strong> used to access your Pipedrive user account.</p>
<p style="text-align: justify">To access this information, go to <strong>Settings &gt; Your devices &gt; <a href="https://app.pipedrive.com/settings/devices">Active devices</a></strong> in your Pipedrive account.<br></p><figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/active%20devices.png" alt=""></figure>

<p style="text-align: justify">This page will display the information pertaining to devices that currently have access to your Pipedrive user account, including any mobile devices accessing the account through a web browser or the Pipedrive mobile app.</p>
<p style="text-align: justify">When clicking on one of the devices, you will see the IP address used when accessing the account, the method used to log in and if the "<strong>Remember login</strong>" option was enabled when logging in.<br> <br> If you wish to log out of any of those active devices, click the "<strong>Log out</strong>" button next to that specific device's name.</p>
<p style="text-align: justify">Doing so will log that device out of Pipedrive, and they will be prompted to provide valid login credentials again in order to continue accessing the account.<br> <br> If you want information regarding the previous login sessions for your Pipedrive user account, you can find that under the <strong>Device history</strong> section of this same page. Learn more about device history in <a href="https://support.pipedrive.com/en/article/how-can-i-see-which-devices-i-have-used-to-access-pipedrive" target="_blank" rel="noreferrer noopener">this article</a>.</p>
<p style="text-align: justify">If you feel that any of your active devices or device history is by an unauthorized device, we recommend you to change your Pipedrive password to secure your account. Learn how to change your password <a href="https://support.pipedrive.com/en/article/how-can-i-change-or-reset-my-password" target="_blank" rel="noreferrer noopener">here</a>.</p>

How can I log myself out of Pipedrive on my connected devices?

<p style="text-align: justify">If you enter the wrong password three times in a row while logging in to your Pipedrive account, you’ll be locked out of your account. This is to ensure your login process is protected against external threats. </p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;width:573px;max-width:573px;"><img src="https://kb-cms.pipedriveassets.com/Annotation%20on%202023-03-16%20at%2008-15-55.png" width="573" height="490" alt=""></figure>
<p style="text-align: justify">When you're locked out, you’re automatically sent an email to unlock your account. Once you unlock your account through the email, you can log in to your account using your email and password again. If you don’t remember your password, we recommend <a href="/auth/login/forgot_password?from=account_locked">resetting your password</a>. </p>
<div class="support-note primary">
<strong>Note:</strong> If you can’t access your email, you’ll be locked out of your account for 24 hours. After that, you can try to log in again. </div>
<figure style="margin-left:auto;margin-right:auto;text-align:center;width:585px;max-width:585px;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202023-03-15%20at%208.57.33%20AM.png" width="585" height="691" alt=""></figure>
<div class="support-note primary">
<strong>Note:</strong> If you received this email without attempting to log in to your Pipedrive account, you should <a href="https://support.pipedrive.com/en/article/contacting-pipedrive-support" target="_blank" rel="noreferrer noopener">reach out to our team</a> right away. </div>
<hr>
<p style="text-align: justify"><strong>Security dashboard</strong></p>
<p style="text-align: justify">On Enterprise plans, you’ll be able to see when a user has unlocked their account by going to <strong>s</strong><strong>ecurity center &gt; Dashboard &gt; <a href="https://app.pipedrive.com/settings/security-dashboard/audit-log" target="_blank" rel="noreferrer noopener">Audit log</a>. </strong></p>
<figure style="margin-left:auto;margin-right:auto;text-align:center;"><img src="https://kb-cms.pipedriveassets.com/Screenshot%202023-03-15%20at%208.59.45%20AM.png" alt=""></figure>

Security: locked out of account after failed login attempts

Account access

Privacy and security

Knowledge Base

Privacy and security

Security features

Data security in Pipedrive

Account access

Got any questions?