Security is a shared responsibility between the hosting provider, site owner, developers, and account users.
Account Access
Use strong unique passwords for the client portal, cPanel, CMS admin, email, registrar, and Stripe accounts. Access should belong to the correct owner and be removed when a person no longer needs it.
Website Updates
CMS platforms, plugins, themes, PHP versions, and custom code should be maintained. Outdated software is one of the most common sources of compromise.
Backups and Recovery
Backups are only useful if they can be restored. JIJ encourages clients to think about recovery before an emergency happens.
Email Security
SPF, DKIM, DMARC, secure passwords, and careful mailbox access reduce spoofing, spam, and account takeover risk.
Incident Response
If something looks suspicious, contact JIJ with the domain, account email, screenshots, and timing. Avoid deleting evidence before the issue can be reviewed.