MANAGE: Security

Protecting accounts, devices and business data

Your business depends on access to email, files, customer information and the services you use each day. Security starts with understanding what needs protecting, then putting a few useful safeguards into regular practice.

This section focuses on business accounts, devices and sign-ins. For tools that protect your website or monitor its availability, visit Security & Monitoring under Site Building.

Start with the accounts your business relies on

Make a short list of the accounts you would need to keep working. These might include email, domain registration, hosting, payments, online storage and social platforms. Your main email account deserves particular attention because other services may use it to send password resets and recovery messages.

Check who can access each account, how it is protected and whether the recovery details are current. Start with these essential services before adding more security products.

Choose the area you need help with

  • Authentication: Explore tools that help confirm your identity when signing in, including authenticator apps, security keys and passkeys.
  • Malware & Threat Protection: Find software for detecting or blocking malicious activity on the devices you use for business.
  • Passwords: Compare tools for creating, storing and using unique passwords, with options for sharing access when you work with others.

These areas work together. Device protection, secure sign-ins and careful handling of access each address a different part of keeping your business running.

Build a few useful habits

Use passkeys where supported, and turn on two-step verification for accounts that still use passwords. Give each account a strong, unique password; a password manager can help you create and store them without having to remember every one.

Keep operating systems, browsers and applications updated, using automatic updates where practical. Protect devices with a screen lock and install software from trusted sources. Before paying for additional protection, check what your devices already include and which features are active.

Pause when a message asks you to sign in, change payment details or act urgently. Open the service through its usual app or website, and confirm unexpected requests through a contact method you already trust.

Plan how you would regain access

Check what happens if you lose your phone, replace a device or cannot open your password manager. Keep recovery codes securely somewhere you can reach without relying entirely on the device or account they are intended to recover.

Back up important business files and check that you can restore them. Understand whether your storage service provides backups, version history or only synchronisation between devices. A copy that follows every deletion may not give you the recovery options you expected.

Manage access when working with others

Where a service supports separate users, give colleagues or contractors their own access with the permissions needed for the work. Review access when a project ends or someone’s role changes, and remove accounts that are no longer needed.

If you need shared passwords or more than one administrator, compare the team features carefully. A free personal edition may be useful for one person while leaving business sharing, recovery or administration to a paid plan.

Choose tools you can maintain

Consider the devices you use, how easily you can recover access and whether the software is licensed for your intended business use. Compare ongoing free features with trial-only extras, and check renewal costs and user limits before subscribing.

For a practical starting point, the National Cyber Security Centre’s small organisations guide covers email, important accounts, device protection, backups and recognising suspicious activity.

How we classify our listings

Each listing carries a label showing the level of work behind it. Inclusion in the directory does not, by itself, mean we have tested or recommend a tool.

  • ✓ Personally tested — We have used the product ourselves. Any accompanying review explains what we tried and the limits of that experience.
  • ◇ Research reviewed — We have examined product information and relevant research in more depth, without claiming first-hand use.
  • ○ Directory listing — An introduction based on available information. No hands-on testing or in-depth review is implied.

Use the descriptions to identify options worth exploring, then check the provider's current features, prices and terms against your own requirements.