Two-factor authentication for your team
Why two-factor authentication matters for everyone on your membership team, which methods to choose, which accounts to protect first and how to roll it out.
Security & Privacy
Protecting members, their data and your content.
Planning for a security incident before it happens
Planning for a security incident on your membership site: who does what, the first hour, telling members, and a simple rehearsal to test your plan.
Transactional emails that build trust
Transactional emails that build trust: how to make receipts, renewal notices and password resets look reliable, arrive quickly and never feel like phishing.
Admin access: who should be able to do what
Admin access for membership sites: how to give staff, contractors and moderators only the permissions they need, and how to remove access cleanly.
Login problems and how to reduce them
Login problems frustrate members and fill your inbox. How to reduce them with clear error messages, reliable password resets and sensible remembered logins.
Stopping spam sign-ups and bots
How to stop spam sign-ups and bots on your membership site with honeypots, email verification and light moderation that real members barely notice.
HTTPS explained for membership site owners
HTTPS explained in plain English for membership site owners: what the padlock does, why every page needs it, and how to fix common certificate problems.
Backups: the insurance policy for your membership site
Backups for your membership site: what to back up, how often, where to keep copies, and why a backup you have never restored cannot be trusted.
Data protection basics for membership sites
Data protection basics for membership sites: mapping the data you hold, handling consent, and answering member requests to see or delete their data.
Privacy policies and terms: what a membership site should cover
What a membership site privacy policy and terms of membership should cover, written in plain language members can actually read and trust.