Most business accounts are lost to reused passwords and stolen logins. Two habits, a password manager and a second sign in step, stop the majority of attacks.
Use a password manager
A password manager creates and stores a long, different password for every account, so you only remember one strong password. A leak at one site then cannot open your others.
Turn on two factor
Add a second step to every account that offers it.
- Start with email, banking and accounting
- Prefer an authenticator app to text messages
- Keep backup codes somewhere safe
- Turn it on for every staff member
Make it a rule
Write the rule down, set up new staff on day one and remove access the day someone leaves. Habits only hold when they are the standard.