How to Manage Security Center Settings from the Client Area

Overview

The Security Center in the Client Area helps you monitor access to your account and manage important security settings. You can:

• Review recent login activity.
• View and manage active sessions.
• Identify unfamiliar devices, locations, or IP addresses.
• Review trusted devices.
• Configure security email notifications.
• Sign out your account from other devices.
• Manage IP whitelist rules when the feature is enabled.

Access the Security Center

1. Log in to the Client Area.
2. Open the main menu.
3. Select Account Details.
4. From the sidebar, select Security Center.

Review Login History and Sessions

Open Login History, then select Sessions.

This section displays recent login attempts and account sessions across your devices and browsers.

Session filters

You can filter the displayed sessions using the following tabs:

• All: Displays every recorded session.
• Active: Displays sessions that are currently in use.
• Idle: Displays sessions that remain open but have not recently been active.
• Closed: Displays sessions that were signed out or terminated.
• Expired: Displays sessions that ended after their validity period expired.

Session information

The table may include the following information:

Field	Description
User	The account owner or user associated with the session.
Device & Method	The operating system, browser, and authentication method used to sign in.
IP / Location	The public IP address and its estimated country or city.
Login Time	The date and time when the session started.
Last Seen	The most recent activity recorded for the session.
Action	Available session-management actions or the current session status.

The session you are currently using is marked as Current session.

Note: IP-based locations are estimates. The displayed location may differ from your physical location when using a VPN, proxy, mobile network, or corporate connection.

What to Do If You Notice an Unfamiliar Login

If you do not recognize a session, device, IP address, or location:

1. Change your Client Area password immediately.
2. Use Revoke Other Sessions to sign out other devices and browsers.
3. Review your account information for unauthorized changes.
4. Enable the available security notifications.
5. Contact Libyan Spider Support if you believe your account has been accessed without authorization.

Revoke Other Sessions

Use Revoke Other Sessions when you want to sign out your account from every other device and browser.

1. Open the Security Center.
2. Go to Login History → Sessions.
3. Select Revoke Other Sessions.
4. Confirm by selecting Revoke All Other Sessions.

All other sessions will be terminated immediately. Your current session will remain active.

This option is recommended if you:

• Signed in from a shared or public device and forgot to sign out.
• Lost a device on which your account was signed in.
• Notice an unfamiliar session.
• Recently changed your password after a suspected security incident.

Manage Trusted Devices

Open the Trusted Devices section to view devices that you have confirmed as yours.

A device becomes trusted after you confirm the relevant security alert sent to your email address. Device trust expires after 30 days.

If no devices have been confirmed, the page displays No trusted devices yet.

Trusting a device helps the system recognize expected login activity. Only confirm a device when you recognize its browser, IP address, location, and login time.

Configure Security Notifications

The Security Notifications section lets you choose which account security events should generate an email notification.

New Device Login

Enable this notification to receive an email when your account is accessed from a device that the system does not recognize.

New Country Login

Enable this notification to receive an email when a login is detected from a country that has not previously been associated with your account.

Successful Login

Enable this notification to receive an email after every successful login to your account.

Enabling all available notifications provides greater visibility into account activity. However, Successful Login notifications may generate more emails if you access the Client Area frequently.

Security notification emails should be reviewed promptly. If you do not recognize the reported login, secure your account immediately and avoid confirming the device as trusted.

Manage IP Whitelist Rules

The IP Whitelist section lets you specify the IP addresses or network ranges that are allowed to access your account.

When at least one whitelist rule is active, login attempts from IP addresses that are not included in the list are blocked.

A whitelist rule may contain:

• A single public IP address.
• An supported IP range.
• A description identifying the location or network.
• Information about who added the rule and when it was created.

If IP whitelist enforcement is disabled

You may see the following notice:

IP Whitelist enforcement is currently disabled by the administrator. Your saved rules are kept and will take effect if the feature is re-enabled.

When this notice appears:

• Your saved rules are not currently being enforced.
• They remain stored in your account.
• They will take effect if the administrator enables the feature again.
• Adding a rule while enforcement is disabled does not currently restrict account access.

Important precautions

Before enabling or relying on an IP whitelist:

• Confirm your current public IP address.
• Avoid using a temporary or frequently changing IP address.
• Include every trusted network from which you need to access the account.
• Be careful when adding office, home, mobile, VPN, or remote-work networks.
• Do not add private addresses such as 192.168.x.x unless the interface specifically supports them; the rule normally requires your public IP address.

Incorrect whitelist settings may prevent you from accessing your account.

Recommended Security Practices

• Use a strong, unique password for the Client Area.
• Do not share your account credentials.
• Regularly review login history and active sessions.
• Enable new-device and new-country login notifications.
• Revoke other sessions after using an untrusted device.
• Verify security alert emails before trusting a device.
• Keep your registered email address secure and up to date.
• Contact Libyan Spider Support immediately if you suspect unauthorized access.