Ubidots
Low-code application development for the Internet of Things
New Security Feature: Login Lockout
We’re excited to introduce Login Lockout, a new security feature that helps protect your Ubidots-powered applications from brute-force attacks and repeated login attempts. With this feature, you can define how many failed login attempts are allowed before temporarily blocking access to an account, and set how long the lockout lasts. It's fully configurable and adds a layer of defense to your app’s authentication flow.
By limiting repeated login attempts, it helps keep malicious actors out while giving peace of mind to your users and your team. With Login Lockout, reinforce your app’s security with just a few clicks.
Protect Your App With reCAPTCHA
Keeping your end-user applications secure is more important than ever. That’s why Ubidots now supports adding a reCAPTCHA field to your app’s login page. This simple but powerful feature helps prevent automated attacks like credential stuffing and bot intrusions, ensuring that only real users gain access. Whether your app serves customers or internal teams, reCAPTCHA adds an extra layer of protection without disrupting the user experience.
Introducing Session Management
We’re also happy to announce our session management security feature. It allows you to implement rules to ensure that users are automatically logged out after a period of inactivity or when a predefined timeout is reached. This feature has several benefits, including:
- Minimizing risk of unauthorized access.
- Helping comply with data protection regulations.
- Protecting user data.
- Reducing the chances of session hijacking.
IP-Based Access Management Is Here
We’re glad to introduce the ability to control who can access your apps and from where by implementing IP-based access management.
This feature allows you to whitelist specific IP addresses or ranges, ensuring that only authorized users or locations can access your app. This is particularly useful for restricting access to internal teams or specific geographic regions.
Introducing Audit Logs
Knowing that security is always among your top priorities, we’re introducing the Audit Logs module to the platform. It’s designed to empower owners and admin users by allowing them to keep track of important activity within their account and apps.
Changes to dashboards, events, devices, functions, and apps will be logged in the module, along with important context information about the change.
Audit Logs is a great tool to:
- Monitor and respond to suspicious activities.
- Detect and track changes in key entities within your apps.
- Ensure compliance with security and audit standards.