Keep your business accounts safe: passwords and two-factor login

For small businesses, the biggest security risks are usually simple ones: reused passwords, phishing messages and accounts without extra protection. A few habits prevent most problems.

Use strong, unique passwords

Every important account (email, banking, social media, website) should have its own long password. If one gets leaked, the others stay safe.

Use a password manager

Nobody can remember dozens of strong passwords. A password manager stores them securely and fills them in for you.

Turn on two-factor authentication

Two-factor login (2FA) asks for a code or app approval as well as your password. Even if someone gets your password, they can't get in without the second step. Turn it on for email, social media, WhatsApp and banking.

Watch out for phishing

• Be suspicious of urgent messages asking you to log in or pay.
• Check the sender and the link before clicking.
• Never share one-time PINs or verification codes.

Control access

Give staff their own logins where possible, and remove access when someone leaves.

Need help securing your business? Our IT support can set up password managers, 2FA and safer settings across your devices.