Protecting your content from piracy, realistically
A realistic guide to protecting your membership content from piracy: what you cannot stop, what you can make harder, and how to respond to leaks.
Security & Privacy
Protecting members, their data and your content.
Account sharing: protecting your membership without punishing honest members
How to spot and discourage account sharing on your membership site fairly, without locking out honest members who log in from several devices.
Password security for members and administrators
Practical password security for membership sites: sensible rules for members, a higher bar for administrators, password managers and safe resets.
A quarterly security review checklist
A quarterly security review checklist for membership sites: a ninety-minute routine covering access, logins, updates, backups, domains, payments and data.
Verifying identity when members contact support
Verifying identity when members contact support: match checks to the risk of each request, use safe methods and help members who lost access to their email.
Fraudulent sign-ups and card testing
Fraudulent sign-ups and card testing on membership checkouts: how to recognize an attack, respond while it is happening and make your checkout a poor target.
Protecting your payout and payment settings
Protecting your payout and payment settings from fraud: how criminals redirect payouts, and the alerts, checks and reconciliation habits that stop them.
Deciding how long to keep member data
Deciding how long to keep member data: a practical method for setting retention periods for accounts, payments, learning records, posts, logs and backups.
Honest communication when something goes wrong
Honest communication when something goes wrong keeps members´ trust. How to tell members straight about outages, mistakes and delays, with templates.
Securing the email account that runs your business
Securing the email account that runs your business: recovery options, forwarding rules, connected apps, old sensitive mail and a thirty-minute inbox audit.