Knowledgebase

Viewing articles tagged 'twofactor'

A Continuity Checklist for Small Businesses A practical starting point.ACCOUNTSDomain auto-renewal enabled Registrar contact details current... A Monthly Client Area Routine Ten minutes a month prevents most of what goes wrong.CHECK THE DASHBOARDUnpaid invoices, tickets... A Monthly Reseller Routine What to do regularly.WEEKLYCheck for update notices and announcements Apply maintenance to sites... A Realistic Social Media Plan Twelve months.MONTH ONEChoose one platform where your customers areSet up the business account... A Store Health Check to Run Quarterly Ninety minutes, four times a year.TECHNICALWooCommerce > Status, and clear every warning PHP... Access and Identity Terms Who can do what.AUTHENTICATIONProving who you are.AUTHORISATIONWhat you are permitted to do once... Access to Financial and Sensitive Systems Higher-risk access.WHAT COUNTSBanking Payment gateway Accounting records Customer data Staff... Accessibility for Membership and Login Areas Behind the sign-in.WHY IT IS OFTEN WORSEAreas behind a login receive less testing and less design... Adding Additional Contacts to Your Account Sub-accounts let a colleague, developer or accountant access the parts of your account relevant... Affiliate Account Security Your affiliate account is part of your Client Area account and deserves the same protection.THE... After Installing: The First Ten Minutes What to do before building anything.SECURITYChange any default administrator credentials Delete... An Annual Review for Your Online Business An afternoon once a year.THE BUSINESSWhat sold, and what did not Which products or services were... Application Security Checklist What to verify before a site goes live.INPUT AND OUTPUTAll database queries parameterised Output... Assessing an Exchange Choosing where to trade.WHAT TO EXAMINERegulatory registration, in a jurisdiction that matters... Authentication Mechanisms Compared Ways of proving identity.WHAT THE FACTOR CATEGORIES ARESomething known Something held Something... Authentication Methods How people prove who they are.WHAT METHODS EXISTPasswords Authenticator applications, producing... Authentication Options How people sign in.WHAT THE BASELINE ISEmail and password, with a reset flow that is secure.WHAT... Backups and Data Protection Obligations Backups contain personal data.WHAT THIS MEANSA backup of your database contains everything the... Blocking Brute-Force Attacks on wp-login.php Automated bots hammer /wp-login.php and /xmlrpc.php on every WordPress site on the internet. Even... Brute-Force Attacks and How to Stop Them Brute forcing means trying password after password against a login page. Bots do this against... Business Continuity: Everything That Matters, Briefly The whole category in one page.WHAT ACTUALLY STOPS BUSINESSESNot disasters. Losing account... Checklist: Annual Security Review Once a year, properly.DATAWhat do you hold, where, and why? Delete what you no longer need... Checklist: When a Device Is Lost or Stolen Immediate actions.IMMEDIATELYWipe it remotely, if possible Report it, if stolenTHEN, FROM A CLEAN... Cloudflare Settings to Review Annually A yearly check.DNSEvery record still needed, and nothing missing Proxy states correct,... Common Access Mistakes What goes wrong.REUSED PASSWORDSA breach elsewhere becomes a breach here.SHARED LOGINSNo... Common Security Mistakes What goes wrong.NOT UPDATINGThe largest cause of compromise.REUSED PASSWORDSA breach elsewhere... Common Social Media Mistakes What goes wrong.CREATING ACCOUNTS EVERYWHEREAnd maintaining none. An abandoned account is worse... Creating an Account During Checkout You can create your Client Area account as part of your first order.WHAT YOU WILL BE ASKED... Creating Your Account Registering.WHAT YOU NEEDAn email address you monitor Your name and contact detailsWHY CONTACT... Data Protection and the NDPR Obligations when you hold customer information.WHAT YOU PROBABLY HOLDNames, phone numbers, email... Dedicated IPs and Attack Exposure A dedicated address is directly attributable to you, which cuts both ways.WHAT CHANGESOn a shared... Digital and Data Risks Technology exposure.WHAT CAN HAPPENA compromised website Loss of customer data Ransom demands... DNS Best Practices Habits worth adopting.RECORD WHERE EVERYTHING LIVESRegistrar, DNS provider, and who has access.... DNS Security Considerations Protecting your domain's records.WHAT AN ATTACKER GAINS FROM CONTROLLING YOUR DNSThe ability to... DNS Security Threats What goes wrong.CACHE POISONINGInjecting false data into a resolver's cache, directing users... DNS Situations Worth Preparing For Anticipating problems.THE DOMAIN EXPIRINGAuto-renewal, a valid card, and a contact address on a... Email on Shared or Public Devices Access away from your own equipment.WHAT TO USEWebmail, in a private browsing window.WHAT NOT TO... Email Security on Devices Protecting your mail.WHAT TO DOLock every device Keep them updated Use encrypted connection... Email, Privacy and the NDPR If you hold customer correspondence, you hold personal data.WHAT THIS MEANS IN PRACTICEMailboxes... Enabling Two-Factor Authentication on WordPress Two-factor authentication (2FA) requires a one-time code from your phone in addition to your... Enabling Two-Factor Authentication on Your Accounts Two-factor authentication (2FA) means a stolen password alone is not enough to get in. It is the... Enabling Two-Factor Authentication on Your Client Area Anyone with your billing login can reach your services, your domains and your cPanel. Protect... Getting the Most From the Affiliate Programme A summary of what actually matters.SET UP PROPERLYJoin, read the terms, test your link, keep your... Giving Remote Workers Access Security and practicality.WHAT TO GIVETheir own account for every system The minimum access... Greylisting and Delayed First Messages Why mail from a new correspondent sometimes takes a few minutes.WHAT IT ISA receiving server... Handling Customer Data Responsibly Obligations that come with collecting information.WHAT YOU PROBABLY COLLECTContact form... How to Join the Rewards Program Joining takes a minute and costs nothing.HOWLog in to your Client Area.Open the Rewards... Individual Accounts, Not Shared Logins The principle.WHY IT MATTERSActions are attributable Access can be removed for one person A... Keeping Records Securely Protection and privacy.WHAT YOUR RECORDS CONTAINCustomer names and addresses Payment information... Keeping Your Client Area Account Secure This account controls your services, your domains and your billing. Secure it accordingly.THE... Keeping Your Rewards Account Secure A balance is value, and the account controls more than rewards.THE BASICSA long, unique password... Logging In to Your Client Area The Client Area at https://zillionkinghost.com/billing/ is where you manage services, invoices,... Managing Administrator Access to Your Store Who can do what, and why it matters.THE PRINCIPLEGive each person the lowest role that lets them... Managing Saved Payment Methods Billing > Payment Methods holds the cards used for automatic renewals.ADDING A CARDAdd the... Managing Sub-Accounts and Permissions Sub-accounts give colleagues access to the parts of the account relevant to them.CREATING... Markets and Exchanges: Everything That Matters, Briefly The summary.ASSETS HELD ON AN EXCHANGE ARE A CLAIM ON THE EXCHANGEExchanges have failed, been... Moving to a New Phone Transferring everything.WHAT TO DO BEFORE STARTINGBack up the old device Note which applications... Not Getting Locked Out Recovery planning.THE RISKTwo-factor authentication protects the account and can lock you... Offering Security Hardening and Cleanup Two related services.HARDENINGApplied once: permissions, admin protection, two-factor, removing... Onboarding and Offboarding Access Starting and ending.WHEN SOMEONE JOINSCreate individual accounts Give the minimum access needed... Password and Access Policy for a Small Business Writing it down.WHAT TO STATEIndividual accounts only, no sharing Unique passwords, through a... Passwords and Access: Everything That Matters, Briefly The whole category in one page.THE BIGGEST RISKPassword reuse. A breach at any service becomes a... Playbook: I Cannot Log In Access problems.ESTABLISH FIRSTLog in to what: cPanel, their site, email, or your billing... Preventing Card Skimming on Checkout The most damaging compromise a shop can suffer.WHAT IT ISJavaScript injected into your checkout... Preventing It Happening Again Closing the loop.WHAT TO DO IMMEDIATELYUpdate everything Remove anything unmaintained Remove... Preventing Reinfection Why cleaned sites get compromised again.THE FOUR CAUSESA backdoor was missed. Attackers plant... Protecting Admin Areas The page attacked most on any site.WHY IT MATTERSLogin pages are attacked continuously by... Protecting Against Brute-Force Attacks Automated password guessing against every exposed service.WHAT IS TARGETEDSSH, control panel... Protecting Against Email Compromise When your account is used against you.WHAT HAPPENSSomeone gains access to a business email... Protecting Customer Data Obligations and practicalities.WHAT YOU HOLDNames, phone numbers, addresses, order history, email... Protecting Customer Data in Your Store You hold personal data about every customer.WHAT YOU HOLDNames, addresses, phone numbers, email... Protecting Customer Data on Your Website If your site collects names, emails, phone numbers or orders, you are responsible for looking... Protecting Your Account Security.WHY IT MATTERSAn account that can buy and sell domains is worth attacking.WHAT TO DOA... Protecting Your Accounts Access that must survive.WHICH ACCOUNTS MATTERDomain registrar Hosting Site administration Email... Protecting Your Accounts From Takeover Account security against fraud.WHICH ACCOUNTS ARE TARGETEDEmail Hosting Domain registrar Payment... Protecting Your Domain and Online Identity Your most valuable digital asset.WHY IT MATTERS MOSTThe domain carries your website, your email... Protecting Your Website's Admin Area The login page of any content management system is attacked constantly by automated tools. These... Protocols and Ports: Everything That Matters, Briefly The summary.WHAT A PORT IS FOROne address, many services. The port says which service a... Rebuilding Rather Than Cleaning When to start again.WHEN REBUILDING MAKES SENSEThe compromise is extensive You cannot be... Recognising Fraudulent Emails Claiming to Be From Us Attackers send convincing messages hoping you will enter your password on a fake login... Recognising Invoice Fraud and Business Email Compromise A common and costly fraud: someone monitors business email, then sends a message at the right... Recognising Phishing Emails That Pretend to Be Us Attackers send convincing emails claiming to be from your hosting provider, hoping you will type... Recovering Access to Your Account If you cannot get in, there is a route back, but it involves verification.FORGOTTEN PASSWORDUse... Recovering From a Hack: Everything That Matters, Briefly The whole category in one page.THE FIRST HOURBack up the compromised state Establish scope Change... Reseller Account Security Checklist Your account holds access to every client you host. Treat it accordingly.YOUR ACCESSLong, unique... Restoring Your Site After Cleaning Getting back to normal.WHAT TO DO IN ORDERVerify the site is clean Remove any maintenance page... Rewards Program: Summary and Checklist Everything worth knowing, in one place.WHAT IT ISA way to earn value back on qualifying activity,... Running a Nigerian Online Business: The Essentials Everything that matters, briefly.SETTING UPA .com.ng or .ng domain, registered in the business... Running Your Business Online: The Short Version Everything that matters, in one page.SET UP PROPERLYDomain in the business name, with... Securing an Online Store Shops are a higher-value target than ordinary websites.WHY THEY ARE TARGETEDThey process... Securing Any Web Application Principles that apply regardless of platform.THE ESSENTIALSKeep everything updated: core, themes,... Securing the Computer You Manage Your Site From Server-side security cannot protect you from malware on your own machine. If your laptop is... Securing the Devices You Log In From The other half of access security.WHY IT MATTERSYour accounts are only as secure as the device... Securing Your Admin Area Protecting the control panel.WHAT TO DOA strong unique password Two-factor authentication Limit... Securing Your cPanel Account with Two-Factor Authentication Two-factor authentication adds a one-time code from your phone on top of your password. Anyone... Securing Your Hosting and Domain Accounts The accounts that control everything.WHY THEY MATTER MOSTControl of your hosting means control of... Securing Your Social Accounts Protecting what you built.WHY IT MATTERSA compromised business account can be used to impersonate... Security Expectations for SaaS Providers What customers require of you.WHAT YOU ARE HOLDINGOther organisations' data, on their behalf.WHAT... Security for Shops Additional requirements.WHAT A SHOP HOLDSCustomer names, addresses and contact details Order... Security Plugins and Tools Application-level protection.WHAT THEY TYPICALLY PROVIDELogin attempt limiting File integrity... Security Responsibilities as a Reseller You sit between us and your clients, and you carry obligations in both directions.PROTECTING YOUR... Sending Backups to Cloud Storage Getting copies off the server automatically.THE OPTIONSGoogle Drive, Dropbox, OneDrive, or object... Setting Up Two-Factor Authentication Practical steps.WHAT YOU NEEDAn authenticator app on your phone.HOW IT WORKSThe service shows a... Social Media Checklist What to verify.SETUPBusiness account, not personal Registered to a business email address... Social Media: Everything That Matters, Briefly The whole category in one page.WHAT IT DOESBuilds familiarity with people who were not looking... Storing Customer Data Securely Practical protection.THE MEASURESHTTPS across the whole site Strong unique passwords and... Subscriber Data and Privacy Handling the list responsibly.WHAT YOU HOLDEmail addresses, names, and whatever else you... Symptom: Cannot Access cPanel Control panel access problems.WHAT TO ESTABLISHDoes the login page load? Is the password... The Security Basics Everyone Needs The essential list.KEEP EVERYTHING UPDATEDCore software, plugins, themes.The single most... Time Synchronisation and Why It Matters Clocks.WHY IT MATTERSCertificates, authentication and logging all depend on accurate time.WHAT... Transferring to a New Machine Moving your work.WHAT TO PLANWhat must move How long it will take What you need immediatelyWHAT... Two-Factor Authentication The measure that stops most attacks.WHAT IT ISA second step beyond your password: a code from an... Two-Factor Authentication for Teams Shared and individual accounts.FOR INDIVIDUAL ACCOUNTSEach person enables it on their own... Two-Factor Authentication on Server Access Adding a second factor where passwords remain.WHERE IT APPLIESControl panel logins: cPanel, WHM... Understanding Verification Requests We will sometimes ask you to prove who you are before acting. Here is why and what to expect.WHEN... Unusual activity or login from a new location A security notification.WHAT TO DO IMMEDIATELYIf it was not you, change the password for that... Using a Password Manager The tool that makes this workable.WHAT IT DOESGenerates unique passwords Stores them encrypted... Website Security: Everything That Matters, Briefly The whole category in one page.THE THING TO UNDERSTAND FIRSTAttacks are automated and... What to Do When Credentials Are Compromised Responding.WHAT COUNTS AS COMPROMISEDYou entered them on a suspicious page A device was infected... What Two-Factor Authentication Does Why it matters most.WHAT IT ISA second step beyond your password.Usually a code from an app,... When Two-Factor Is Not Enough Its limits.WHAT IT DOES NOT STOPA compromised device, where the attacker has the codes too An... Which Passwords Matter Most Prioritising.THE ORDER OF IMPORTANCEYour email Your password manager Your domain registrar Your... Who Should Have Access to Your Records Controlling financial information.WHO NEEDS ACCESSYou Your accountant Anyone who records... Why We Ask for Verification Before Making Account Changes When you ask us to reset a password, change the registered email, unlock a domain or transfer... Your First Week: A Security Starting Plan Where to begin.DAY ONEChange the password on your email to a unique generated one Enable the... Your Reseller Welcome Email Save this message. It contains details you will need repeatedly.WHAT IT CONTAINSYour WHM username...
Back

Are you happy with your experience? Leave us a review on Trustpilot.


Trustpilot