How do I keep my account secure?

Your SalesCenta account holds your orders, your revenue figures, and your customers' details. These are the settings that keep it in your hands.

Two-factor authentication

Two-factor authentication (2FA) adds a second check at sign-in, so a stolen password alone is not enough to get in. As the account owner you can set the policy for your whole team:

• Require 2FA for admins — anyone with administrative access must use it.
• Optional 2FA for staff — other team members can turn it on for themselves.

[Screenshot: the two-factor authentication settings]

Requiring it for admins is the single highest-value change on this page. Those are the accounts that can see revenue and change payment settings.

Session timeout

Sessions can be set to expire after a period of inactivity, which signs people out automatically if they walk away.

[Screenshot: the session timeout setting]

This matters most on a shared computer — a shop counter or back office where more than one person uses the same machine.

Restricting access by IP

You can limit access to specific IP ranges, so the dashboard can only be reached from your office or shop network.

[Screenshot: the allowed IP ranges setting]

Use this carefully. If you set a range and then try to sign in from home or a phone on mobile data, you will be locked out.

Give people the least access they need

Most security problems are not break-ins — they are someone internal seeing or changing more than they should. Set each teammate's permissions to the minimum that lets them work. See How do I invite my team?

Remove people the day they leave

Take departing staff out under Settings → Team & Access Control immediately. A dormant login nobody is watching is exactly how accounts get misused.

Audit logs

Under Settings → Audit Logs you can see what actions have been taken in your account and by whom — useful when something changed and nobody remembers changing it.

[Screenshot: the audit logs page]

Basics that still matter

• Use a password you have not reused on another site.
• Never share one login between several people — invite them instead.
• Keep the email address on your account one you can always access.