3 steps to make your Magento site more secure

How secure is your Magento site? Due to its popularity as an e-commerce platform, Magento is an attractive target for hacker attacks, but basic security precautions can go a long way. We know that getting started with security can feel a little daunting, so we put together this short guide to help you out. Follow these three steps and improve your Magento site’s security!

1. Use the latest version: Make sure that you are using the latest version of Magento. If you are using Open Source (formerly known as Community Edition), the latest version as of September 2017 is 2.1.9. If you are running an older version, we strongly recommend you to upgrade and check Magento’s technical resources page for the latest release information.

2. Add two-factor authentication: A simple yet powerful measure is to add a two-step authentication to your login. You can either buy an extension on Magento Marketplace or opt for an open source solution.

3. Manage your admin panel: Change Admin Directory to something unique (do not use /index.php/admin/), add an SSL certificate and make sure to restrict access to the admin panel to your IPs.

By implementing these three simple security measures, you have made your site more secure. Congratulations!

Working with security is a long-term commitment, which is why we recommend testing your e-commerce store for vulnerabilities on a regular basis. Detectify scans your site for over 700 vulnerabilities, including a range of security issues specific to Magento (like Magento Admin Uploader XSS, Magento Shoplift SQL Injection and many more). Watch our short intro video to learn more!

[do_widget id=detectify_puff-9]