Basics · 5 min read
Keep shop accounts safe: passwords, 2FA and shared devices
Chat, email and marketplace accounts are your storefront — five steps to keep them from being taken over
If a shop account is taken over, scammers can use the shop's name to trick customers into paying right away — the damage isn't only to the shop, it reaches customers too.
Five things to do today
- Make your main email the most secure account, because it's used to recover all the others
- Turn on two-step verification (2FA) on every account that offers it — use an authenticator app if you can
- Use a different password everywhere with a password manager, so you don't have to remember them
- Keep backup recovery codes somewhere safe, separate from your phone
- Know who can access each account and remove access as soon as a staff member leaves
Shared devices
- Give staff sub-accounts or assistant roles the platform provides, instead of sharing the owner's password
- Log out when you finish on a shop device and set a screen lock
Signs of a break-in
- Login alerts from devices you don't recognise
- Messages the shop didn't send, or changes to payout account settings
If it happens: change the main email password first → log out of all devices → change the other passwords → tell customers on every channel that the shop has not changed its payment account
A shop should never ask customers for an OTP, and no real platform asks a shop for its OTP in chat — anyone who asks is a sign of a scam
Key points
- Main email + 2FA before anything else
- Unique passwords and recovery codes kept separately
- Use assistant roles instead of sharing passwords, and have a plan for break-ins
Try with a free tool
Terms in this lesson
You finished this path 🎉
Questions or experience to share?
Ask in the community →General knowledge only — not legal, tax or financial advice for your case. Check official sources or an expert before deciding.