FAQ

Account Lock

Why do I have to Unlock my account every time I request a Gridy authentication challenge?

At Gridy we believe a User should be in control of their account at all times; the Gridy Account lock is the front door to a Gridy User account, similar to the front door of your home, only the key holder is able to unlock their account to request & complete a new Gridy authentication challenge.

Traditionally, a User account would only ever be locked after a number of failed authentication attempts (if ever). At Gridy we believe a User account should be locked at all times and only be unlocked by the registered account holder from inside their Gridy Authenticator when requesting a Gridy authentication challenge.

Blocked Rules

I only want to use Gridy's Blocked Rules service to block Bad actors from trying to access our secure website, Is that OK?

Yes, as long as you have a paid subscription you can just use the Gridy Block API service.

I'm getting a lot of failed login attemtps to my web application each day from a specific IP address range, how do i block this IP range?

We hear this problem quite a lot from websites & organisations that don't have control over the network infrastructure their application or website is hosted on; this is why we have introduced the Gridy Block API service.

Gridy Block restricts who can request access your Gridy protected assets & where those requests originate.

If you have already signed up for an API account and integrated Gridy ID into your authentication workflow, all you need to do is submit the IP address of the User wanting to login as part Gridy authentication challenge API request - Gridy then checks all your Blocked Rules & blocks any request that matches your rules (similar to what a firewall would do at the network layer)

If you just want to use the Gridy Block API service, see the getting started guide below.

See more examples of managing Blocked Rules on your account here

I want to block all Iranian & Russian IPv4 address ranges from being able to login to my Gridy protected web application, how do i do that?

Gridy Block can block an entire country IPv4 address range from requesting access to your Gridy protected application or website.

See more examples of managing Blocked Rules on your account here