How do I view active logins and manage banned IPs and devices?

Two panels: Logins and Banned sessions

Storeep has two separate panels under Settings. Logins lists the logins to your own Storeep account, so you can spot and end ones you do not know. Banned sessions lists every IP address and device blocked from your storefront. Both need the Settings permission.

Logins (your account sessions)

Open Settings > Logins. The table lists your logins, newest first. Each row shows:

• Date: when the login happened, in your store timezone.
• IP: the IP address the login came from.
• Country: a flag for that IP.
• Browser, OS, Device: what was used to log in.

Your current login carries a This device badge and cannot be selected, so you never sign yourself out by mistake. A note warns: "Logging in from a location or IP address you don't know may indicate that the account has been hacked."

If you use the Storeep mobile app, you also get a Security Alert notification each time someone logs in to your account, with the IP address. Tap it to open Logins.

Signing out a login

1. To end one login, click the power icon at the end of its row (Logout the session).
2. To end several, tick their checkboxes, then choose Logout sessions from the table menu.

Whoever was using that login is sent back to the login screen. If you do not recognize a login, sign it out and change your password in Settings > Security, which also ends every trusted device. See Security and two-step verification.

Banned sessions

Open Settings > Banned sessions. It lists every banned IP address and banned device, newest first. The panel opens with a warning, Bans affect real people: one IP can be shared by a whole office or building, so when you are not sure who is behind a ban, releasing it is safer.

How bans get created

An IP or device lands on this list in three ways:

• You banned the IP from an order. In the order details you can ban the customer's IP. This works without any app. Clicking it again unbans the IP.
• You banned the device from an order. This needs the Shield app. Clicking it again unbans the device.
• Spy Blocker caught someone copying content or opening developer tools on your store. See Spy Blocker.

What a ban does

• An IP ban blocks that internet address, even after the visitor clears their browser data, until you release it. Everyone sharing that address is blocked too.
• A device ban blocks that device, even if it changes its IP address.
• Banned visitors see a blocked page instead of your store and cannot place orders. If Shield's Decoy mode is on, a banned device or IP address sees a normal store and gets a fake order confirmation instead, so the attacker does not know they are blocked.
• Bans cover your whole store, in every market.
• A ban keeps working even if you uninstall the app that created it.

Reading the table

• IP / Device: the IP address, or the device identifier, with the ban date and time below it.
• Type: IP or Device.
• Country, Browser, OS, Device: from the visitor's latest visit, or a dash when Storeep has no visit details.
• VPN/Proxy: Detected or Undetected, or a dash when unknown.

If you banned the same IP from several orders, it shows once.

Releasing a ban

1. To lift one ban, click the unlock icon at the end of its row (Release this ban).
2. To lift several, tick their checkboxes, then choose Release selected bans from the table menu.

You can release IP and device bans together. The visitor can open your store and order again right away. If something goes wrong, nothing is changed and you can simply try again. When nothing is banned, the panel shows "There's no banned sessions yet".