Protect your account
Good habits to prevent unauthorized access to your client area, your websites and your email.
·4 min read
To protect your Upkyo account, use a long, unique password (My profile, Change my password), connect your Google account in Security settings if you wish, give each team member their own access rather than sharing yours, and be wary of emails asking for your credentials: Upkyo will never ask you for them.
Your client area gives access to your domain names, websites, mailboxes and invoices. Someone who logs in as you could change your DNS, hijack your email or delete a website. This guide brings together the simple habits that shut out the vast majority of attempts.
Secure your account step by step
- Use a long, unique password that you do not use anywhere else: My profile, Change my password.
- If you wish, connect your Google account in My profile, Security settings: you then benefit from your Google account's security.
- Give each team member their own access rather than sharing yours, see Give another person access to your account.
- Check that your account's email address is up to date and that only you can access it.
- Be wary of emails asking for your credentials: Upkyo will never ask you for them.
Found a vulnerability or illegal content? Use the Report abuse page.
What makes a good password?
A good password is first of all long: a phrase of four or five unrelated words is stronger and easier to remember than a short word full of symbols. It must also be unique: if another site where you use the same password is hacked, fraudsters will try it everywhere.
The easiest way is to use a password manager (the one in your browser, your phone or a dedicated app). It generates random passwords and remembers them for you.
Avoid: your name, your date of birth, your company name, 123456 or a password you already use elsewhere.
Why connect your Google account?
By connecting your Google account in Security settings, you can sign in to your client area with Google. You then benefit from your Google account's protections: unusual sign-in alerts and, if you have turned it on with Google, 2-Step Verification.
In that case, protect your Google account all the more carefully: it becomes the key to your client area.
Why you should never share your credentials
Sharing your password with a web designer, an accountant or a partner causes two problems: you no longer know who did what, and you cannot remove one person's access without changing the password for everyone.
Invite each person with their own access instead, see Give another person access to your account. When the collaboration ends, you simply remove their access.
How to spot a phishing email
Phishing imitates an official message to trick you into typing your credentials on a fake website. Common signs:
- Unusual urgency: "your domain expires in 24 hours", "your account will be suspended".
- A link that does not lead to upkyo.com when you hover over it with your mouse.
- A request for a password, code or card number by email.
- Spelling mistakes, a rough logo or a strange sender address.
If in doubt, do not click: type upkyo.com into your browser yourself and log in. If a payment really is due, you will see it in your client area.
Protect your websites and mailboxes too
- Give each mailbox a different password, see Change a mailbox password.
- Keep WordPress, themes and plugins up to date, see Update WordPress, plugins and themes.
- Delete FTP accounts and WordPress administrator accounts that are no longer used.
What to do if you think your account has been hacked
- Change your password immediately in My profile, Change my password.
- Also change the password of the email address linked to your account.
- Open a ticket from
/submitticket.phpor write to support@upkyo.com to report the incident.
Frequently asked questions
Can Upkyo ask for my password by email or phone?
No, never. If someone asks for it claiming to be Upkyo, do not reply and report the message to support.
How do I change my client area password?
Open My profile, then Change my password. Choose a long password that you do not use on any other website.
I forgot my password, what should I do?
Use the forgotten password link on the client area login page: you receive an email to choose a new one. If you no longer have access to your email address, contact support.
Can a team member manage my services without my password?
Yes: invite them with their own access, see Give another person access to your account. They log in with their own credentials and you can remove their access at any time.
How do I report a fraudulent website or a vulnerability?
Use the Report abuse page. Describe what you found and the address concerned.