Securing your company’s access: passwords, keys and 2-step verification
When you use several tools, security rests on a few simple actions: passwords, 2-step verification, revocable keys and limited access.
The more tools you use, the more doors there are into your company. Good news: a few simple actions greatly reduce the risks, with no technical skills.
1. A different password for each tool
If the same password is used everywhere, a leak on one service exposes all the others. A password manager spares you from remembering them.
2. 2-step verification wherever possible
It asks for a second code, sent to your phone, on top of the password. Even if the password is stolen, access stays blocked. Turn it on first for your email, your payment services and your shops.
3. App passwords for connections
When a tool has to read your mailbox, create a dedicated app password rather than giving your usual password. You can delete it at any time without changing anything else.
4. Separate, revocable keys
Each connection between two tools should have its own key, which you can cancel on its own if it is compromised. A key shared across ten uses becomes impossible to remove without breaking everything.
5. Give everyone only the access they need
Someone who only views does not need an administrator’s rights. Limit roles, and remove access as soon as someone leaves the team.
With Pilot-Biz
Each connection has its own revocable key, secrets are encrypted, each workspace is isolated and roles limit access to sensitive data. Passwords and card numbers typed into your forms are never read.