Security Settings
Change your password and sign out other devices, lock access to known networks with an IP allowlist, connect your identity provider, and set the usage alerts that warn you before a cap bites.
Settings → Security holds the controls that decide who can reach your organization and from where.
Changing your password
Under Settings → Security → Password, enter your current password and the new one twice. Passwords must be at least 8 characters.
Other devices are signed out
This is the part worth knowing before you need it.
Changing your password immediately ends every other session — every other browser, every other device, anyone still signed in anywhere. You stay signed in where you made the change, and nowhere else.
That's deliberate. The usual reason to change a password in a hurry is that somebody else might have it, and a change that left their session running would be reassurance without protection. If you're rotating your password as routine housekeeping, expect to sign in again on your phone and your other laptop.
Signing out other sessions does not revoke API keys. Those are separate credentials with their own lifecycle — if a key may be compromised, delete it from Settings → Credentials.
If you've forgotten your password
Changing your password requires knowing it. If you can't sign in at all, use Forgot password? on the sign-in page.
Enter your email and Talkr sends a link to choose a new password. A few things worth knowing:
- The link expires in an hour, and works once. Requesting a second link invalidates the first, so always use the most recent email.
- The page says the same thing either way. Whether or not that address has an account, you'll see "if that email has an account, a link is on its way." That's deliberate — an error saying "no such account" would let anyone check which people have Talkr accounts by typing in their addresses. The trade-off is that a typo looks identical to success, so if nothing arrives, check the spelling.
- Resetting signs out every device, exactly like changing your password.
- You won't be signed in automatically. After setting the new password you sign in with it, which confirms it works and stops a link sitting in a mailbox from being a one-step route into the account.
If you never receive the email, check your spam folder first, then ask your organization's admin to confirm which address the account uses.
Accounts that sign in through an identity provider
If your organization uses Single Sign-On, your account has no Talkr password to change; your identity provider holds your credentials. The form will tell you so rather than failing quietly.
Every password change — and every failed attempt — is recorded in your Audit Log.
IP Allowlist
Restrict your organization to specific IP addresses or CIDR blocks. With no entries, access is unrestricted — this is opt-in.
The allowlist applies to everything, not just API keys: dashboard sign-in, API keys, and SSO alike. An address that isn't on the list can't reach your organization by any route.
That breadth is the point — an allowlist you can walk around isn't one — but it makes the first entry the one to get right.
Adding an entry
Enter a single address (203.0.113.10) or a CIDR block (203.0.113.0/24), with an optional label so the list stays readable months later. Both IPv4 and IPv6 are accepted.
Matching is real subnet matching, so 203.0.113.0/24 covers every address in that range.
Talkr won't let you lock yourself out
If an entry would leave your own current address outside the allowlist, Talkr refuses it and tells you the address it saw. The same check runs when you remove an entry, since deleting the one range that covers you has exactly the same effect.
This matters more than it might sound. Once an allowlist excludes you, you're rejected at sign-in — including on the page that would remove the entry. There is no self-service way back; it takes a platform operator or direct database access.
If you genuinely mean it — allowlisting a datacentre range from a laptop that isn't in it, accepting that you'll be signed out — the confirmation lets you proceed anyway.
Removing the last entry is always allowed: an empty allowlist is unrestricted, so it's the way to switch the feature back off.
Before adding your first entry, check what address Talkr actually sees you from. If your team works from home, on mobile networks, or behind a VPN with rotating egress addresses, an allowlist will lock people out unpredictably — allowlist the VPN's egress range rather than individual offices.
Every addition and removal is recorded in your Audit Log.
Single Sign-On
Connect your own identity provider — Okta, Microsoft Entra ID, Google Workspace, or any OpenID Connect provider — so your team signs in with the accounts they already have, and losing access there means losing access here.
Because setting it up means exchanging metadata with your provider, you request it from this page and our team completes it with you. Full detail is in Single Sign-On.
Usage Alerts
Set the percentages of your monthly call-minutes cap at which Talkr should warn you — for example 50%, 80% and 100%.
Crossing one raises a notification and emails every Owner and Admin. You get one alert per threshold per billing cycle, so a busy month doesn't turn into a stream of duplicates.
Without alerts the first sign of a spent cap is calls not connecting, which is a bad way to find out. See Usage & Cost for where the numbers come from.
Who can change these
Security settings require the manage_credentials permission. Owners and Admins have it by default; see Team & Invites for granting it to a Member without making them an Admin.