← CRM features

Credentials management in a CRM: what they are and how to control them

Credentials are the data that prove a user's identity and grant access to a system: username and password, access token, API key or digital certificate. Credentials management means creating, distributing, rotating and revoking them in a controlled way. In CRMconnect every user has their own credentials, with roles and data-level permissions, and access revocation is instant when someone leaves.

What credentials are: definition and types

Credentials are any element used to prove identity in a system. In IT practice there are four categories:

  • Something you know: username and password, PIN
  • Something you have: hardware token, app-generated code (2FA), digital certificate
  • Something you are: fingerprint, face recognition
  • System credentials: API keys and OAuth tokens applications use to talk to each other without human input

Why credentials management matters in a CRM

A CRM holds the customer base, negotiated prices and the sales pipeline - exactly the data most likely to walk out with a departing employee. Common habits in smaller companies (a shared team account, a password in a shared file) make both auditing and real revocation impossible.

  • Shared account = you cannot tell who exported or edited a customer list
  • A rep leaving without revocation = continued access to the customer base
  • A password reused elsewhere propagates any external breach into the CRM

How CRMconnect handles credentials

Every person gets their own account, and data access is granted through roles rather than generic logins.

  • Roles and permissions: reps see their portfolio, managers see the team, admins configure
  • Two-factor authentication (2FA) and configurable password policies
  • Access log: who signed in, when, and what they exported
  • Instant revocation: disabling an account cuts access across every active session
  • Integration credentials (API keys to ERP, marketplaces, couriers) are stored encrypted and can be rotated without stopping the flows

Good practice for your sales team

Never share accounts between reps, enable 2FA for roles with export rights, rotate integration keys when you change vendor or integrator, and include CRM access revocation in the offboarding checklist - the same day, not the same month.

Frequently asked questions

What are credentials?

Credentials are the data a user presents to prove identity and gain access to a system: username and password, 2FA code, digital certificate, API key or access token.

What do access credentials mean in IT?

They are the elements a system verifies before letting someone in. Authentication confirms who you are (credentials); authorisation defines what you may do (roles and permissions).

What is the difference between credentials and permissions?

Credentials prove identity, permissions define rights. You can hold valid credentials and still not see another team's data if your role does not grant it.

What happens to a departing rep's access?

An admin disables the account and access is cut immediately across all active sessions. Activity history stays in the CRM so the customer relationship continues.

How are ERP integration keys protected?

They are stored encrypted, are not visible in the interface after saving, and can be rotated at any time without stopping synchronisation.

Real control over access to your customer base

Roles, 2FA, access logs and instant revocation - configured from day one.

Continue with