You do not have to worry about you store security. Online store complies with to the highest international safety standards so you can rest assured that your store and your customers are safe. All stores operate via a secure connection (HTTPS), protected by an SSL certificate. However, you need to protect your account by using strong passwords.
Use strong and unique passwords for each of your accounts, from your online store to your email and social media. When creating passwords follow general recommendations from Google:
Do:
Don’t use:
A phishing attack happens when someone attempts to trick you into sharing personal data online. For example, a scammer might send you an email that looks like it's from your service provider so that you'll send them sensitive information about your account such as passwords or credit card information.
Anyone can become the target of a scammer. Often scammers send phony emails or direct messages on social networks that ask you to visit a link, download a file or open an attachment. These messages are often created to look like they came from legitimate sources. If you take any of these actions, your device may be infected with malicious software that will allow the attackers to steal your personal data such as login credentials and banking or credit card details.
You can protect yourself against phishing by carefully reading every message that hits your inbox. If you see any signs of phishing, refrain from taking any of the requested actions (sending account information, clicking links, etc.) The first step you can take right now to prevent phishing is to use a different email address for your public contact info than the one you use for your store account login.
If you receive a message that asks you to provide or update your personal data, like login or bank credentials, refrain from taking any actions if you see any of the following warning signs:
Make sure that your firewall and antivirus software are updated regularly and working properly. Although it can’t guarantee complete protection, updated security software and firewall protection is the first line of defense.
When you open a website where you may be asked to provide a username and password or any other sensitive information, make sure that the website is using a secure HTTPS connection.
Before you click on a link inside an email, you must be absolutely certain who the email is coming from and that the link is secure. If you want to test the link, you can open a new browser window in incognito mode and type in the URL instead of clicking the suspicious link.
Do not open any attachments, unless you are expecting them and know what they contain. These attachments could infect your system with viruses and malware that could damage the files on your computer, steal your passwords or spy on you without your knowledge.
Do not publicly post the email address that is linked to your online store account, as it may expose you to phishing attempts by online scammers. Always use a different email address for public spaces such as the contact email address on your website.
If you are using Instant Site, make sure to include your public email address instead of your store account email address. You can change your contact email in the store admin panel → Website → Edit Instant Site design and content → Contact Information.
You can resolve any concerns about a suspicious message by talking directly to someone at the organization that supposedly sent the email. When you call the company or organization, use a phone number that you already have on file or one that appears on multiple reputable online sources. Do not use the contact details listed in the email. The company or organization should be able to confirm over the phone if the suspicious email is legitimate and from them.
