---
url: 'https://docs.codatum.com/workspace/access-and-security/security.md'
description: Controlling IP access control and multi-factor authentication
---

# Security (Beta) (Optional feature)

Workspace-wide access control. You can configure it from [global nav](../../guide/screen-layout) > **Workspace settings** > **Security**. Only a Workspace Owner can change it ([Workspace permissions](../../permissions/workspace)). You can configure [IP access control](#ip-access-control) and [multi-factor authentication control](#mfa-control).

For an individual account's own login methods (password, Google login, MFA registration), see [Login and security](../../account/settings/login#account-mfa).

::: info
This feature is in **beta**. The specification might change without notice.
:::

::: tip
This is an **optional feature**. Depending on your contract, it might not be available.
:::

## IP access control {#ip-access-control}

Limits workspace access to allowed IP addresses or CIDR ranges only.

### Setup {#ip-access-control-setup}

1. Open [global nav](../../guide/screen-layout) > **Workspace settings** > **Security**.
2. Turn on **Enable IP Access control**.
3. To apply this to guests as well, turn on **Include guests**.
4. Enter the allowed IPs in **Allowed IP address**.

### Supported formats {#ip-address-formats}

**Allowed IP address** accepts the following formats:

* A single IP address (for example, `203.0.113.15`)
* CIDR notation (for example, `192.168.1.0/24`)
* Both IPv4 and IPv6
* Multiple IP addresses or ranges

When you enter values, your current IP address appears as a suggestion.

### Scope {#ip-access-control-scope}

* Access to resources in the workspace while signed in is in scope. [Reports](../../features/notebook/sharing/report/overview) are also in scope.
* Turning on **Include guests** also applies this to [guests](../administration/user#member-and-guest).
* [Public links](../../features/notebook/sharing/public-link/overview) and [signed embeds](../../features/notebook/sharing/signed-embed/overview) aren't affected.

### Notes {#ip-access-control-notes}

* Changed settings apply immediately to users who newly sign in. For users who are already signed in, it can take some time to take effect.
* You must be accessing from at least one of the allowed IPs when you save.

### If you lose access {#ip-access-control-lockout}

If incorrect IP restrictions lock you out, contact Codatum support.

## Multi-factor authentication control {#mfa-control}

Requires multi-factor authentication for password logins.

### Setup {#mfa-control-setup}

1. Open [global nav](../../guide/screen-layout) > **Workspace settings** > **Security**.
2. Turn on **Require Multi-factor authentication**.
3. To apply this to guests as well, turn on **Include guests**.

### Specifications {#mfa-control-spec}

* Password login is in scope. Google login isn't affected.
* Turning on **Include guests** also applies this to [guests](../administration/user#member-and-guest).
* For MFA registration on the account side, see [Login and security](../../account/settings/login#account-mfa).