What is Security?

The Security module protects your store's sign-in page from password guessing and gives you a list of blocked IP addresses.

Find it at Settings → Security once the module is on.

Login lockout — after too many wrong passwords for the same email or phone number, that account is locked for a few minutes. This protects your staff and your customers. You choose the number of tries and the lock time.
Blocked IPs — a list where you record IP addresses (or ranges) you want to block, with a reason and an optional expiry.
Rate Limits tab — a read-only view of request limits.

Blocked IPs are recorded but not enforced. Adding an address to the list does not stop that address from visiting your store or signing in today. Treat the list as a record only until this is fixed.
The Rate Limits tab shows sample numbers, not your store's real limits. CartWhizz does limit requests on its servers, but this tab does not read those settings.
Enable 2FA on the module's Configure screen does nothing. Two-factor sign-in is its own module: see the Two-Factor Authentication guide.

Settings → Sign-ins and sessions shows recent sign-ins to your admin and lets you sign out other devices.

One home for
every way you sell.