Browse all guides
Security & privacy
Allowed domains, blocked visitors, privacy and GDPR requests, and two-factor sign-in.
- 01 Turn on two-factor authentication Protect your Pengo login with a 6-digit code from an authenticator app, change your password, and learn what happens when you sign in with 2FA on. 2 min read
- 02 Set up privacy, consent and data retention Ask visitors for consent before Pengo tracks them, choose which visitor details to store, and delete old conversations automatically after a set number of days. 2 min read
- 03 Handle GDPR data requests Give a visitor a copy of their data, erase a contact and their conversations, request Pengo's DPA, and know what deleting your Pengo account removes. 2 min read
- 04 Limit where your chat widget loads Turn on allowed domains so your website's chat widget only loads on domains you own, and stop anyone from running your snippet on another site. 2 min read
- 05 Block a visitor by IP or email Stop abusive visitors and spammers from chatting with you by blocking their IP address or email address, and learn what a blocked visitor sees. 2 min read