Enhanced Chatbot Security with User Authentication!

Samuel Su

Samuel Su

on May 24, 2025

We're excited to introduce a powerful new security feature for your chatbots: User Authentication. This update allows you to ensure that only verified users can interact with your chatbot when embedded via our SDK, adding a crucial layer of security and control.

🔐 Why User Authentication?

In many scenarios, you need to ensure that sensitive information or specific functionalities are accessible only to logged-in or known users. Our new User Authentication feature makes this possible by verifying user identity before a chat session can begin.

⚙️ How It Works

For secure integration with authenticated users, our SDK now supports two special parameters:

  • userId: A unique identifier for the user (up to 30 characters).
  • userHash: A security hash generated on your server to validate the user's identity (up to 100 characters).

🛡️ Key Security Implementation

Server-Side userHash Generation: To maintain the integrity of the authentication process, the userHash MUST be generated on your server using a secret key provided by us. Never generate this hash on the client-side or expose your secret key in client-side code.

🚀 Enabling User Authentication

  1. Navigate to Settings > Security tab in your Chat Data dashboard.
  2. Turn on the User Authentication toggle.
  3. Once enabled, you'll be provided with a unique Secret Key for User Authentication. Use this key on your server to generate the userHash.

⚠️ Important Changes When Enabled

Activating User Authentication brings important changes to how users can access your chatbot:

  • No More Direct Public URL Access: Chatting directly with your chatbot via its public URL will be rejected.
  • SDK Authentication Required: Users must interact with your chatbot through either the chatbot widget or iframe embedding methods.
  • 🔑 Mandatory SDK Parameters: Your frontend implementation using our SDK must send the correct userId and the server-generated userHash to the chatbot to initiate a conversation.
  • 🚫 Access Denied Without Authentication: Any attempts to chat without proper userId and userHash will be rejected, safeguarding your chatbot.

Secure your chatbot interactions and gain greater control over who accesses your AI. Enable User Authentication today to add an essential security layer to your chatbot deployments!

For more details, please refer to our documentation.

Create Chatbots with your data

In just a few minutes, you can craft a customized AI representative tailored to yourself or your company.

Get Started