Keeping your accounts & website safe
Practical security guides for business owners and their teams — from strong passwords to what to do if something goes wrong.
- Difficulty
- Beginner
Online security can feel overwhelming, but the basics are straightforward and genuinely powerful. These guides walk you through every step — from choosing a password manager to responding calmly if something goes wrong.
You don't need to be a tech expert. You just need to know what matters and what to do. Come here to set your defences up properly, to brief your team, or to work out your next move after something suspicious happens. If your site is showing signs of a hack right now, jump to What to do if your site is hacked.
Quick summary
Nearly every break-in we get called about comes down to three things: a reused password, no two-factor authentication, and out-of-date software. Fix those and you have shut the door on most attacks. Everything else in this section is detail on top of that.
If you only read three things
- Why security matters for your business — the lay of the land.
- Why you need a password manager — the single highest-leverage thing you can do today.
- Two-factor authentication, explained — close behind in leverage, and easier than it sounds.
Basics
Why security matters for your business
The real-world risks and why small businesses are targeted.
SSL & HTTPS, explained
What the security icon in your browser address bar means.
Why backups are your safety net
Backups protect you when everything else fails.
Passwords & 2FA
How to create strong passwords
Simple rules that make your passwords hard to crack.
Why you need a password manager
The easiest way to have unique, strong passwords everywhere.
Choosing a password manager
Side-by-side comparison of the most popular options.
Two-factor authentication, explained
What 2FA is and why it matters so much.
How to set up two-factor authentication
Step-by-step for your most important accounts.
Using an authenticator app
Authy, Google Authenticator, and more — how they work.
Passkeys, explained
The password-free login method more services are adding.
Recognizing threats
How to recognize phishing attempts
Spot a fake email or link before you click.
Common email scams targeting businesses
The most common tricks used against small businesses.
Business email compromise explained
The costly scam where attackers impersonate your boss or supplier.
Safe browsing habits for your team
Simple habits that keep your whole team safer online.
If something goes wrong
What to do if your site is hacked
Calm, step-by-step guide to recovering your website.
What to do if an account is compromised
How to lock things down and recover quickly.
Malware & your website explained
What malware is, how it gets in, and how to remove it.
Operational security
Securing your WordPress site
The key settings every WordPress site owner should check.
Securing your domain name
Prevent domain hijacking and keep your domain safe.
Security steps when someone leaves
The checklist to run every time a team member moves on.
Securing your social media accounts
Protect your Facebook, Instagram, LinkedIn, and more.
Device & Wi-Fi security basics
Keep the devices your team uses every day protected.
Data privacy basics for your business
What data you hold, and how to handle it responsibly.
Reference
Your business security checklist
Everything on one page — print it and work through it.
Security terms, explained simply
Plain-English definitions for every security term we use.
The emergency path
If you think something has already happened, follow this order: spot it, contain it, clean it up, restore.
I think I was hacked
Step 1 — confirm the symptoms and stop the bleeding.
What to do if your site is hacked
Step 2 — contain the damage and lock the doors.
Recovering from a hacked website
Step 3 — the full clean-up and re-secure playbook.
Restoring your site from a backup
Step 4 — get a known-good version of your site back online.
Security monitoring explained
Prevention — how we spot trouble before you do.
Your website disaster recovery plan
Prevention — decide who does what before anything happens.
Need a hand?
Last updated
Performance terms, explained simply
A plain-English glossary of website speed and performance jargon — from bandwidth to Time to First Byte to render-blocking resources.
Why security matters for your business
A plain-English explanation of the real-world risks facing small businesses online, and why basic security steps make a big difference.