
You can configure the behavior of the system related to suspicious traffic or unknown devices trying to access a customers's account.  

The logic is based on:
- IP address
- deviceID
- UUID
- number of log-on attempts with wrong credentials

Whenever we deal with unknown factors, it may trigger control mechanisms or the "Fail 2 ban" behavior.

## Untrusted traffic
Regardless of the authorization method, Synerise filters and rejects traffic from hosts that are known to be used in hacking attacks around the world.  
This covers all TOR network traffic, public proxies, and more.

## Unknown device control

<div class="admonition admonition-note"><div class="admonition-icon"><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2.5"><path stroke-linecap="round" stroke-linejoin="round" d="M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" /></svg></div><div class="admonition-body"><div class="admonition-content">

These settings only apply to [Synerise authentication](/docs/settings/tool/iam-for-apps/synerise).

</div></div></div>


Unknown device control lets you decide how the system reacts to log-in attempts from devices that the customer hasn't used before. By default, all devices are allowed.

1. Go to <img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/icons/settings-icon.svg" alt="Settings icon" class="icon"> **Settings > Authentication for mobile apps**.
1. In the **Unknown device control** section, click **Show**.
1. Select one of the modes:
   - **Turned off** (default setting)
      - Authentication is allowed even if a given device was never used before.
      - Customers are not notified when a new device is used.
   - **Approve logging from unknown devices through links in notifications**  
      When a new device is used, the customer receives an email. They can only complete the log-in by clicking the link in the email.
   - **Receive notifications without the need to approve logging from unknown devices**  
      When a new device is used, the log-in proceeds without any confirmation, but the customer receives an email notification.
   - **Conditional approval based on location**  
      - If a log-in attempt from an unknown device is detected in the country selected as the default location, authentication is allowed.  
      - If a log-in attempt from an unknown device is detected outside the country selected as the default location, authentication requires a confirmation by clicking a link in an email.

   <figure>
   <img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/unknown-device-control.png" alt="Control access based on devices" class="large" >
   <figcaption> Settings for unknown device access </figcaption>
   </figure>  
4. Configure the additional settings of the mode that you selected:
   
   <div class="content-tabs" data-tab-group="tabgrp-1314">
   <div class="tab-buttons"><button class="tab-button" data-tab-id="tabgrp-1314-0" data-tab-group="tabgrp-1314" data-tab-active="true">Turned off</button><button class="tab-button" data-tab-id="tabgrp-1314-1" data-tab-group="tabgrp-1314">Approve logging from unknown devices</button><button class="tab-button" data-tab-id="tabgrp-1314-2" data-tab-group="tabgrp-1314">Receive notifications</button><button class="tab-button" data-tab-id="tabgrp-1314-3" data-tab-group="tabgrp-1314">Conditional based on location</button></div>

   <div class="tab-panel" data-tab-id="tabgrp-1314-0" data-tab-group="tabgrp-1314" data-tab-active="true">

   No additional settings are required.

   </div>

   <div class="tab-panel" data-tab-id="tabgrp-1314-1" data-tab-group="tabgrp-1314">

   1. **Optional**: Select a template and subject for the email. If you skip this part, a default template and subject are used.
         1. Expand the dropdown and select a template or [create a new one](/docs/campaign/e-mail/creating-email-templates) by clicking **Create new template**.  
         1. Enter a subject.
      2. **Optional**: Enter a URL where the customer will be redirected after authorizing the new device.
      3. **Optional**: Enter a URL where the customer will be redirected if the link was clicked before and the device is already authorized.

   </div>

   <div class="tab-panel" data-tab-id="tabgrp-1314-2" data-tab-group="tabgrp-1314">

   1. **Optional**: Select the template and subject for the email. If you skip this part, the default template and subject are used.
         1. Expand the dropdown and select a template or [create a new one](/docs/campaign/e-mail/creating-email-templates) by clicking **Create new template**.  
         1. Enter a subject.

   </div>

   <div class="tab-panel" data-tab-id="tabgrp-1314-3" data-tab-group="tabgrp-1314">

   1. Select the default location.
      1. **Optional**: Select the templates and subjects for the emails. If you skip this part, default templates and subjects are used.
         1. Expand the dropdown and select a template or [create a new one](/docs/campaign/e-mail/creating-email-templates) by clicking **Create new template**.  
         1. Enter a subject.
      2. **Optional**: Enter a URL where the customer will be redirected after authorizing the new device.
      3. **Optional**: Enter a URL where the customer will be redirected if the link was clicked before and the device is already authorized.

   </div>
   </div>
  <br>
   <hr>
   For more information about templates, click to expand:
   
      <details class="accordion"><summary>Jinjava tags used in the templates</summary><div class="accordion-content"><table> <thead> <tr> <th>Data Insert</th> <th>Description</th> </tr> </thead> <tbody><tr> <td>{% customer PARAM %}</td> <td>Inserts a profile&#39;s parameter or attribute, for example <code>{% customer firstName %}</code>; <code>{% customer attributes.customAttribute %}</code></td> </tr> <tr> <td>{{email}}</td> <td>Inserts the customer&#39;s email, the same that was used in the log-in attempt.</td> </tr> <tr> <td>{{device_control_url}}</td> <td>Inserts the link that authorizes the device.</td> </tr> <tr> <td>{{device_control_token}}</td> <td>Inserts the token that authorizes the device. Can be used to build your own URL for use with a mobile app.</td> </tr> <tr> <td>{{country}}</td> <td>Inserts the country of the log-in attempt (based on IP geolocation).</td> </tr> <tr> <td>{{ip}}</td> <td>Inserts the IP address of the device used in the log-in attempt.</td> </tr> <tr> <td>{{login_time}}</td> <td>Inserts the time of the log-in attempt.</td> </tr> </tbody></table></div></details>

   
<details class="accordion"><summary>Example confirmation of sign in from unknown device template</summary><div class="accordion-content"><figure> <img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/hard-confirmation-email.png" alt="Confirmation of sign in from unknown device template " class="large" > <figcaption> Confirmation of sign in from unknown device template </figcaption> </figure> <pre><code class="language-html">&lt;!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"&gt; &lt;html lang="en"&gt; &lt;head&gt; &lt;meta http-equiv="Content-Type" content="text/html; charset=UTF-8"&gt; &lt;meta name="viewport" content="width=device-width, initial-scale=1"&gt; &lt;meta http-equiv="X-UA-Compatible" content="IE=edge"&gt; &lt;style type="text/css"&gt; /* Outlines the grid, remove when sending */ table td { /* border: 1px solid cyan; */ } /* CLIENT-SPECIFIC STYLES */ body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; } table, td { mso-table-lspace: 0pt; mso-table-rspace: 0pt; } img { -ms-interpolation-mode: bicubic; } /* RESET STYLES */ img { border: 0; outline: none; text-decoration: none; } table { border-collapse: collapse !important; } body { margin: 0 !important; padding: 0 !important; width: 100% !important; } /* iOS BLUE LINKS */ a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; font-family: Arial, sans-serif !important; font-weight: inherit !important; line-height: inherit !important; } /* ANDROID CENTER FIX */ div[style*="margin: 16px 0;"] { margin: 0 !important; } &lt;/style&gt; &lt;/head&gt; &lt;body style="margin:0; padding:0; background-color:#fff;"&gt; &lt;center&gt; &lt;div style="background-color:#fff; max-width: 600px; margin: auto;"&gt; &lt;!--[if mso]&gt; &lt;table role="presentation" width="600" cellspacing="0" cellpadding="0" border="0" align="center"&gt; &lt;tr&gt; &lt;td&gt; &lt;![endif]--&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="200" align="left" valign="middle" style="padding:10px;"&gt; &lt;img alt="Synerise" src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/030d47ff7f497bf302d3248641a216ad.png" style="width: 140px;"&gt; &lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="400" align="left" valign="middle" style="padding:10px; font-weight: bold; font-size: 28px; font-family: Arial, sans-serif; color:#384350"&gt; Hi, {% user firstname %} &lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt; &lt;img width="91" src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/38937e17f860105ccfea3df81558734b.png" alt="" /&gt; &lt;/td&gt; &lt;/tr&gt; &lt;tr&gt; &lt;td width="400" align="left" valign="middle" style="padding:10px; font-weight: bold; font-size: 22px; font-family: Arial, sans-serif; color:#384350"&gt; There was a new sign-in attempt to your account. Was it you? &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="400" align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; We have spotted a new sign in to your account &lt;strong&gt;{{ email }}&lt;/strong&gt;. We want to make sure that it was you. Have a look at the details: &lt;br&gt;&lt;br&gt;&lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="50" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;strong&gt;Country:&lt;/strong&gt; &lt;/td&gt; &lt;td width="550" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; {{ country }}&lt;/td&gt; &lt;/tr&gt; &lt;tr&gt; &lt;td width="50" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;strong&gt;IP address:&lt;/strong&gt; &lt;/td&gt; &lt;td width="550" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; {{ ip }}&lt;/td&gt; &lt;/tr&gt; &lt;tr&gt; &lt;td width="50" align="left" valign="middle" style="padding:0px 10px 10px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;strong&gt;Time: &lt;/strong&gt; &lt;/td&gt; &lt;td width="550" align="left" valign="middle" style="padding:0px 10px 10px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; {{ login_time }}&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; If it was you and you recognize this sign-in attempt, please click the link below to confirm that device (this will enable it for sign-in to your account) &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;a href="{{ device_control_url }}" style="color: #0c68ff; font-weight: bold;"&gt;Yes, it's me!&lt;/a&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; If you find results related to you on either of these sites, we strongly recommend to review your passwords across all online services you use. &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;a href="#" style="color: #0c68ff; font-weight: bold;"&gt;haveibeenpwned.com&lt;/a&gt;&lt;br /&gt; &lt;a href="#" style="color: #0c68ff; font-weight: bold;"&gt;monitor.firefox.com&lt;/a&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; If you do not recognize this sign-in attempt, we recommend you to change your password directly in the app and also check if your email account is not a part of any known password leaks. You can do that at: &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; Have a good day,&lt;br /&gt; The Synerise Team &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt; &lt;hr style="border: 1px solid #e5e5e5;" /&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#b6bdc4;line-height: 22px;"&gt; Have questions? The Synerise Team is here to help.&lt;br /&gt; Please contact &lt;a href="support@synerise.com" style="color: #0c68ff; font-weight: bold;"&gt;support@synerise.com&lt;/a&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://www.facebook.com/synerise"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/778ed84375be209b05f2fb333f7bbb16.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://www.youtube.com/c/Synerise/"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/eadde6165d2421eb5f98d9654006d9ee.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://www.linkedin.com/company/synerise/"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/42126cc8dfb468a79dc4b37c45082b78.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://twitter.com/synerise"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/f2512acc01435e5cd10edfc0e419908b.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="500" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 10px;font-family: Arial, sans-serif; color:#b6bdc4;line-height: 16px;"&gt;The administrator of your personal data is SYNERISE S.A. with its registered office at ul. Lubostroń 1, 30-383 Kraków,entered into the Register of Entrepreneurs of the National Court Register by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register under the number: 0000468034. You can contact the Administrator regarding the protection of personal data by email at the followingaddress: &lt;a target="_blank" href="mailto:iod@synerise.com"&gt;iod@synerise.com&lt;/a&gt;, or by traditional mail sent to the address of the Administrator's seat, i.e. SYNERISE S.A. ul. Lubostroń 1.30-383 Kraków. &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;!--[if mso]&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;![endif]--&gt; &lt;/div&gt; &lt;/center&gt; &lt;/body&gt; &lt;/html&gt;</code></pre></div></details>


   
<details class="accordion"><summary>Example information about sign in from unknown device template</summary><div class="accordion-content"><figure> <img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/soft-confirmation-email.png" alt="Template for email with information about sign in from unknown device" class="large" > <figcaption> Template for email with information about sign in from unknown device </figcaption> </figure> <pre><code class="language-html">&lt;!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"&gt; &lt;html lang="en"&gt; &lt;head&gt; &lt;meta http-equiv="Content-Type" content="text/html; charset=UTF-8"&gt; &lt;meta name="viewport" content="width=device-width, initial-scale=1"&gt; &lt;meta http-equiv="X-UA-Compatible" content="IE=edge"&gt; &lt;style type="text/css"&gt; /* Outlines the grid, remove when sending */ table td { /* border: 1px solid cyan; */ } /* CLIENT-SPECIFIC STYLES */ body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; } table, td { mso-table-lspace: 0pt; mso-table-rspace: 0pt; } img { -ms-interpolation-mode: bicubic; } /* RESET STYLES */ img { border: 0; outline: none; text-decoration: none; } table { border-collapse: collapse !important; } body { margin: 0 !important; padding: 0 !important; width: 100% !important; } /* iOS BLUE LINKS */ a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; font-family: Arial, sans-serif !important; font-weight: inherit !important; line-height: inherit !important; } /* ANDROID CENTER FIX */ div[style*="margin: 16px 0;"] { margin: 0 !important; } &lt;/style&gt; &lt;/head&gt; &lt;body style="margin:0; padding:0; background-color:#fff;"&gt; &lt;center&gt; &lt;div style="background-color:#fff; max-width: 600px; margin: auto;"&gt; &lt;!--[if mso]&gt; &lt;table role="presentation" width="600" cellspacing="0" cellpadding="0" border="0" align="center"&gt; &lt;tr&gt; &lt;td&gt; &lt;![endif]--&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="200" align="left" valign="middle" style="padding:10px;"&gt; &lt;img alt="Synerise" src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/030d47ff7f497bf302d3248641a216ad.png" style="width: 140px;"&gt; &lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="400" align="left" valign="middle" style="padding:10px; font-weight: bold; font-size: 28px; font-family: Arial, sans-serif; color:#384350"&gt; Hi, {% user firstname %} &lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt; &lt;img width="91" src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/38937e17f860105ccfea3df81558734b.png" alt="" /&gt; &lt;/td&gt; &lt;/tr&gt; &lt;tr&gt; &lt;td width="400" align="left" valign="middle" style="padding:10px; font-weight: bold; font-size: 22px; font-family: Arial, sans-serif; color:#384350"&gt; There was a new sign-in to your account. Was it you? &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="400" align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; We have spotted a new sign in to your account &lt;strong&gt;{{ email }}&lt;/strong&gt;. We want to make sure that it was you. &lt;br&gt;&lt;br&gt;Have a look at the details: &lt;/td&gt; &lt;td width="200" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="50" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;strong&gt;Country:&lt;/strong&gt; &lt;/td&gt; &lt;td width="550" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; {{ country }}&lt;/td&gt; &lt;/tr&gt; &lt;tr&gt; &lt;td width="50" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;strong&gt;IP address:&lt;/strong&gt; &lt;/td&gt; &lt;td width="550" align="left" valign="middle" style="padding:10px 10px 0px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; {{ ip }}&lt;/td&gt; &lt;/tr&gt; &lt;tr&gt; &lt;td width="50" align="left" valign="middle" style="padding:0px 10px 10px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;strong&gt;Time: &lt;/strong&gt; &lt;/td&gt; &lt;td width="550" align="left" valign="middle" style="padding:0px 10px 10px 10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; {{ login_time }}&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; If you do not recognize this sign-in attempt, we recommend you to change your password directly in the app and also check if your email account is not a part of any known password leaks. You can do that at: &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; &lt;a href="#" style="color: #0c68ff; font-weight: bold;"&gt;haveibeenpwned.com&lt;/a&gt;&lt;br /&gt; &lt;a href="#" style="color: #0c68ff; font-weight: bold;"&gt;monitor.firefox.com&lt;/a&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; If you find results related to you on either of these sites, we strongly recommend to review your passwords across all online services you use. &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#384350;line-height: 22px;"&gt; Have a good day,&lt;br /&gt; The Synerise Team &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt; &lt;hr style="border: 1px solid #e5e5e5;" /&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 14px;font-family: Arial, sans-serif; color:#b6bdc4;line-height: 22px;"&gt; Have questions? The Synerise Team is here to help.&lt;br /&gt; Please contact &lt;a href="support@synerise.com" style="color: #0c68ff; font-weight: bold;"&gt;support@synerise.com&lt;/a&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://www.facebook.com/synerise"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/778ed84375be209b05f2fb333f7bbb16.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://www.youtube.com/c/Synerise/"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/eadde6165d2421eb5f98d9654006d9ee.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://www.linkedin.com/company/synerise/"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/42126cc8dfb468a79dc4b37c45082b78.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="25" align="center" valign="middle" style="padding:10px;"&gt; &lt;a href="https://twitter.com/synerise"&gt;&lt;img src="https://upload.snrcdn.net/9bbb7035ecf3565cceed63d321d7d9b31236850d/default/origin/f2512acc01435e5cd10edfc0e419908b.png" width="20" style="margin:0; padding:0; border:none; display:block;" border="0" class="img" alt=""&gt;&lt;/a&gt; &lt;/td&gt; &lt;td width="500" align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="left" valign="middle" style="padding:10px; font-size: 10px;font-family: Arial, sans-serif; color:#b6bdc4;line-height: 16px;"&gt;The administrator of your personal data is SYNERISE S.A. with its registered office at ul. Lubostroń 1, 30-383 Kraków,entered into the Register of Entrepreneurs of the National Court Register by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register under the number: 0000468034. You can contact the Administrator regarding the protection of personal data by email at the followingaddress: &lt;a target="_blank" href="mailto:iod@synerise.com"&gt;iod@synerise.com&lt;/a&gt;, or by traditional mail sent to the address of the Administrator's seat, i.e. SYNERISE S.A. ul. Lubostroń 1.30-383 Kraków. &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;" bgcolor="#FFFFFF"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:5px 10px;"&gt; &lt;table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="max-width:600px; width:100%;"&gt; &lt;tr&gt; &lt;td align="center" valign="middle" style="padding:10px;"&gt;&lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;!--[if mso]&gt; &lt;/td&gt; &lt;/tr&gt; &lt;/table&gt; &lt;![endif]--&gt; &lt;/div&gt; &lt;/center&gt; &lt;/body&gt; &lt;/html&gt;</code></pre></div></details>

5. Confirm the settings by clicking **Apply**.

## Fail 2 ban settings 

<div class="admonition admonition-note"><div class="admonition-icon"><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2.5"><path stroke-linecap="round" stroke-linejoin="round" d="M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" /></svg></div><div class="admonition-body"><div class="admonition-content">

These settings only apply to [Synerise authentication](/docs/settings/tool/iam-for-apps/synerise).

</div></div></div>


The "Fail 2 ban" feature blocks access to an account after too many failed log-in attempts, which protects the account from brute-force attacks. By default, it's turned off.

The lock is divided into 3 stages. You can set different attempt timers, ban durations, and number of allowed failed attempts for each stage. An account proceeds to a new stage when the ban from a previous stage expires and another unsuccessful log-in attempt is made.

The stages are re-set after a successful log-in attempt.

<figure>
<img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/ban-settings-general.png" alt="Ban settings" class="full" >
<figcaption> Ban settings </figcaption>
</figure>

1. Go to <img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/icons/settings-icon.svg" alt="Settings icon" class="icon"> **Settings > Authentication for mobile apps**.
2. In the **Fail 2 ban settings** section, click **Show**.
3. Define the settings for each stage of the ban:
    1. In the **Failed attempts collection period**, enter the time during which the login attempts are tracked. It is counted from the first attempt of logging in. If the allowed number of failed attempts is exceeded in this period, the ban is applied.
    2. In the **Ban duration**, enter the time during which a customer can't log in to the application.
    3. In the **Max failed auth. attempts**, enter the number of failed attempts allowed in the selected period.  
    **Example**: 

    <figure>
    <img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/ban-settings.png" alt="Configuration of settings for account registration" class="full" >
    <figcaption> Example: a customer is banned for 5 minutes after 10 failed log-in attempts in 120 seconds. </figcaption>
    </figure>
4. Confirm by clicking **Apply**. 