The security measures that matter most.
FOR YOUR ACCOUNTS
Strong unique passwords on hosting, domain, email, gateway and social accounts Two-factor authentication on all of them, particularly the gateway and the domain registrar Never share logins; each person gets their own
FOR YOUR WEBSITE
Keep everything updated Never use nulled themes or plugins HTTPS enforced Backups stored off the server
FOR PAYMENTS
Never store card details. Use a hosted gateway. Verify funds in your own bank before dispatching, not from a screenshot
FOR YOUR DOMAIN
Auto-renewal enabled Registered in the business name Registrar lock on
THE TWO MOST DAMAGING LOSSES
The domain, which takes the site and email with it The gateway account, which stops you being paid
Protect those two above everything.
WHAT TO TELL STAFF
Never act on a change of payment details received by message or email without telephone verification. That single rule prevents the most costly fraud.
