Set a Security Contact for your Klaviyo account

Set a Security Contact for your Klaviyo account

Estimated 2 minute read

Updated May 18, 2026, 12:00 AM EST

Table of contents

Overview
Who can be set as a Security Contact
How to set a Security Contact
What happens when the Security Contact changes
Default behavior and automatic validation
What to expect in the future
Additional resources

Overview

The Security Contact lets your company designate a specific account Admin as the primary point of contact for security-related communications from Klaviyo - such as breach alerts, suspicious activity warnings, and compliance requests.

By default, every Klaviyo account automatically has the account Owner set as the Security Contact. This means every account already has a Security Contact configured, even if you've never set one up yourself. If you'd like a different Admin to receive security communications, you can update this at any time.

Who can be set as a Security Contact

A user can be designated as Security Contact if they meet all of the following criteria:

Their role is Admin or Owner
Their account is active
They have logged in within the last 365 days
They are not in a blocked staff role

There is no billing tier restriction - this feature is available on free and paid accounts.

How to set a Security Contact

Owners and Admins can view and change the Security Contact. If your account uses custom roles, Account settings permissions determine access: View lets a user see the contact, while Edit lets them change it.

Open the account menu and select Settings > General > Security.
Locate the Primary security contact section.
In the Contact dropdown, select the Admin or Owner you want to designate.
Your change saves automatically. Check for the confirmation message: Security contact updated successfully.

What happens when the Security Contact changes

When you change the Security Contact, the newly assigned contact receives an email notification. The account Owner also receives a notification if they are not the newly assigned contact.

Default behavior and automatic validation

Klaviyo automatically assigns the account Owner as the Security Contact on all new and existing accounts. If you have not manually configured a Security Contact, your Owner is already set as the default.

Klaviyo also runs periodic background checks to validate the assigned Security Contact. If the contact becomes invalid (for example, if their account is deactivated), Klaviyo will automatically revert the Security Contact to the account Owner and notify the Owner by email.