---
title: How secure is Recurring SMS? Who can access my campaigns?
description: "**Recurring SMS** implements enterprise-grade security measures. **Data Isolation:** ✅ **User-Level Separation:** - You can ONLY see your own campaigns - Cannot view or modify other users' campaigns - Even if you guess campaign IDs ✅ **Reseller Hierarchy:** - Resellers see…"
url: "https://www.smsgatewaycenter.com/blog/kb/how-secure-is-recurring-sms-who-can-access-my-campaigns/"
updated: "2025-10-23"
category: Bulk SMS / Recurring SMS
---

# How secure is Recurring SMS? Who can access my campaigns?

**Recurring SMS** implements enterprise-grade security measures.

**Data Isolation:**

✅ **User-Level Separation:**

- You can ONLY see your own campaigns
- Cannot view or modify other users' campaigns
- Even if you guess campaign IDs

✅ **Reseller Hierarchy:**

- Resellers see their own campaigns
- Cannot access parent or child user campaigns
- Complete isolation maintained

**Authentication & Authorization:**

✅ **Login Required:**

- Must be logged in to access
- Session timeout after inactivity
- Auto-logout on suspicious activity

✅ **CSRF Protection:**

- All forms protected against Cross-Site Request Forgery
- Secure tokens on every action
- Prevents unauthorized commands

✅ **Role-Based Access:**

- Only users with SMS permissions
- Admins cannot access user campaigns directly
- Audit trail maintained

**Cron Security:**

✅ **CLI-Only Execution:**

- Cron runs only via command line
- Cannot be triggered from browser
- Prevents unauthorized execution

✅ **Token Authentication:**

- Unique secret token required
- Token stored securely
- Regular token rotation recommended

✅ **Timeout Detection:**

- 5-minute execution limit
- Automatic timeout alerts
- Prevents resource abuse

**Data Protection:**

✅ **Encrypted Storage:**

- Sensitive data encrypted at rest
- Secure transmission (HTTPS)
- Password protection

✅ **Input Validation:**

- All inputs sanitized
- SQL injection prevention
- XSS protection

✅ **Rate Limiting:**

- Prevents abuse
- API rate limits
- Protects against spam

**API Security:**

✅ **Secure Communication:**

- API keys never exposed
- Encrypted data transmission
- Proper authentication headers

**Audit & Logging:**

✅ **Comprehensive Logging:**

- All actions logged
- Timestamp and user tracking
- Cannot be modified by users

✅ **Execution History:**

- Complete audit trail
- Who created/modified campaigns
- When changes were made

**Best Practices for Users:**

✔ **Strong Passwords:**

1.

- Use complex passwords
- Change regularly
- Don't share credentials

✔ **Logout When Done:**

1.

- Especially on shared computers
- Close browser after use

✔ **Monitor Activity:**

1.

- Review execution reports
- Check for unexpected campaigns
- Report suspicious activity

✔ **Secure API Keys:**

1.

- Don't share with others
- Rotate if compromised
- Use different keys for test/prod

✔**Review Permissions:**

1.

- Limit team member access
- Use role-based permissions
- Audit user access regularly

**Compliance:**

✅ **GDPR Ready:**

- Data deletion on request
- Export user data
- Consent management

✅ **DLT Compliance:**

- Template validation
- Mandatory sender ID
- Message template matching

**Incident Response:**

If you suspect security issue:

✓ **Immediately:**

1.

- Change password
- Pause all campaigns
- Logout all sessions

✓ **Contact Support:**

1.

- Report incident details
- Provide suspicious activity logs
- Follow guidance from support team

✓ **Review Activity:**

1.

- Check execution reports
- Verify campaign settings
- Monitor credit usage

### More Related Articles

- [What are the best practices for running successful recurring campaigns?](https://www.smsgatewaycenter.com/blog/kb/what-are-the-best-practices-for-running-successful-recurring-campaigns/)
- [How do I permanently delete a recurring campaign?](https://www.smsgatewaycenter.com/blog/kb/how-do-i-permanently-delete-a-recurring-campaign/)
- [Can I modify a campaign that’s already running?](https://www.smsgatewaycenter.com/blog/kb/can-i-modify-a-campaign-thats-already-running/)

Found this useful?[Add as Preferred Source on Google](https://www.google.com/preferences/source?q=smsgatewaycenter.com)