Strict session security protects your Hostify account if a user's login session is stolen, for example through malware or a phishing page. While it is on, every user's session is tied to the country they signed in from. If requests for that session start coming from a different country, the session is closed and the user has to sign in again.
It is on by default for every Hostify account.
What your users will notice
Nothing, in day-to-day work. Switching between Wi-Fi and mobile data, or a changing IP address, does not trigger it. Only the country matters.
A user who crosses a border while signed in is signed out once and sees the message "Your session was closed because your location changed. Please sign in again." They sign in as usual (email, password and the verification code, or Google / Apple) and continue working.
Signing in through the Tor network is not possible. This applies to every account, regardless of the switch below.
Where to find the setting
Go to Settings -> Security Settings -> Session tab. The Strict session security switch is under Logout idle users. Click Save changes after changing it.
Only users with the Administrator role can change it. Every change is recorded in your account's security log.
When would I turn it off?
Leave it on unless your team regularly works across a border during the day and the repeated sign-ins get in the way, for example staff who commute between two countries, or a company network that reaches the internet through another country.
With the switch off, users are no longer signed out when their country changes. Hostify still records these events, so our support team can review them with you if something looks wrong.
If a user is signed out with the message above and was not travelling, treat it as a warning sign: someone may have used their session from elsewhere. Have the user change their password right away and contact Hostify support.
See also: Security Settings Two-factor authentication.