The security of our clients’ and clubs’ data is one of LuckyFit’s key priorities. That is why we are introducing an enhanced security mode for working within the system.
What will change in the near future?
Very soon, two-factor authentication (2FA) will become mandatory for all LuckyFit users when logging into the system.
This means that a single login and password will no longer be enough to access your account — you will also need to confirm your login using a special code.
How to prepare for working with 2FA?
-
Download the free Google Authenticator app on your smartphone. It is available for iOS and Android.
-
In LuckyFit, click on your user avatar and enable two-factor authentication.
We recommend setting up two-factor authentication right now, without putting it off. This will allow you to check the settings in advance and seamlessly switch to the new operating mode.
Additional security for API
For clubs that use the LuckyFit API, configuring IP restriction is also becoming mandatory.
You can find this parameter along the path:
Settings → Integrations → API → IP Restrictions
If your club uses integrations via API, you need to check the settings right now and specify the allowed IP addresses.
Why is it important to set this up right now?
LuckyFit stores and processes information that is crucial for club operations: client data, subscription and visit information, financial and operational data, as well as other official information.
Two-factor authentication and IP restrictions create additional layers of protection:
-
Protection against using a stolen password. Even if a user’s password becomes known to an unauthorized person, additional confirmation will be required to log in.
-
Protection of employee accounts. The additional factor helps protect system access even in the event of a compromised password.
-
Protection of club data. The CRM contains information essential for daily operations and club management.
-
Control over API access. IP restriction allows you to determine which IP addresses can send requests to the API.
-
Reduced risk of unauthorized access. Additional verification layers help minimize the risk of unauthorized individuals accessing the system.
Take care of the settings in advance
The transition to the enhanced security mode will happen very soon, so we advise not to delay the setup.
Please verify that two-factor authentication is configured for your club’s users and that IP restrictions are set up for the API.
LuckyFit security is, first and foremost, the security of our clubs’ data, their employees, and their clients.
