Security and system health · TMKAN

Legal Center

License Terms

Service Plans

What's new

Security and system health

Hide your sign-in behind a secret link, choose which addresses may reach your system, and read its health at a glance.

One page holds three things: a secret link to your sign-in, the addresses allowed to reach your system, and System Health, which shows at a glance whether everything works.

Before you start

The permission Modify Security & Protection.

The master password: every save on this page asks for it.

Turn on the secret link

With the security gate on, your system opens only at its secret link. Anyone who opens your address without it sees a blank “404 Not Found” page.

Open Settings › Security & Protection.

Under The access link, switch on Enable Security Gate.

In Gate Path, type a secret word in English letters and numbers, 2 to 64 characters.

Copy the link in Full Link Preview and keep it safe: without it you cannot sign in.

Press Save access settings and give the master password.

The security gate, switched on

Everyone else is signed out at once and signs in again through the new link. You stay signed in.

Allow or block addresses

Under Who may enter, open Protection Mode and choose:

ModeWhat it does

Whitelist · allow onlyLets in only your addresses.

Blacklist · block specificKeeps some out.

Type an address and press +. Press × on an address to remove it.

Whitelist mode, with two addresses

Your owner account is never refused by the list, so a mistake can always be fixed.

Check your system’s health

Scroll down to System Health. Each card covers one part of your system, such as Database, Backups or Outgoing email.

Look for a red card: it needs you. Backups turns red two days after the last backup.

Press Check again to read it all afresh.

The System Health panel

Good to know

Type the secret word exactly: Office7 and office7 are two different links. Words the system uses, such as login or admin, are refused.

Forgot the link? It is in the system folder’s .env file on your server, on the line TMKAN_GATE_SLUG.

Each entry in the list is one exact address; a range such as 192.168.1.0/24 does not work.

Staff using the TMKAN App on mobile data come from their phone’s address, so a whitelist refuses them.