Employee access to Bitrix24 and the REST API may be temporarily blocked if suspicious activity is detected. This is a standard security measure designed to protect user data.
The most common reason for blocking is suspicious activity in an employee's account. This often happens due to weak or unreliable passwords, disabled two-step authentication, or multiple login attempts from unusual devices. These are signs that the account may have been compromised.
If an employee's account is blocked, they will not be able to log in to Bitrix24, and the "Incorrect password" message will appear. At the same time, the REST API for the entire Bitrix24 account will be blocked, disabling integrations, webhooks, and applications.
This is done to protect data. Access can be restored — details are provided below.
Restore access to Bitrix24 and the REST API
Employee account blocked. Employees cannot restore access on their own. Ask the account administrator or another employee with an active account to contact technical support. Include the Bitrix24 account address, the blocked user's name, and email in the message.
Contact Bitrix24 Support
Recover Bitrix24 password
Administrator account blocked. If the administrator's or account owner's profile is blocked, identity verification will be required to restore access. After verification, we will remove the block and restore the REST API. The administrator will not be able to log in to the account or contact support directly. In this case, there are two options:
- Ask another employee with an active account to contact support and describe the situation.
- You can send an email to the official email address sales@bitrix24.com with a description of the situation.
No access to the account and only one user. If access to the account is completely lost and no other active employees remain, restoring access will not be possible. This situation may occur if the user was the account owner and the only employee. In this case, we cannot confirm ownership of the account. It is likely that the account has been compromised, and restoring access or data will not be possible.
Prevent future blocks
Blocks usually occur because a user's password was compromised or insufficiently secure. To avoid such situations, we recommend:
- Using strong and unique passwords.
- Avoiding the use of the same password across different services.
- Enabling two-step authentication—this is the primary method for preventing account breaches.
Enable two-step authentication for Bitrix24 login
