Contents
What should I do to protect my Magento website?
To protect your Magento website and customers, we recommend auditing your modules, extensions, and templates on a regular basis. These components can become deprecated, obsolete, or include bugs that pose serious security risks to your website. Have your developer review any new components that you are considering adding to your store.
Is there a security alert registry for Magento?
Magento has an official Security Alert Registry. Enroll to receive notifications whenever there is a new security release for your store. Statistically, your best defense is to promptly install the latest Magento security patches as soon as they become available.
Where can I download a patch for Magento?
Download the patches specific to your Magento version from the Magento Downloads page. Upload the .sh or .patch files to your Magento root directory. If your Magento store is compiled, disable the compiler under System > Tools > Compilation. Test the Magento store to confirm functionality.
Why do you need a TLS certificate for Magento?
Magento website administrators should add TLS certificates to all ecommerce websites to protect visitors and securely transmit cardholder data. TLS allows the use of HTTP/2, a major revision of the HTTP network protocol, which can significantly improve a website’s performance.
Why are so many Magento sites not PCI compliant?
The unfortunate reality is that data breaches and attacks against ecommerce sites are on the rise, and a large number of Magento sites are not PCI compliant. Many vulnerable Magento websites are targeted by cybercriminals who seek to steal sensitive customer data and credit card information.
What’s the best way to secure your website?
Statistically, your best defense is to promptly install the latest Magento security patches as soon as they become available. These patches significantly mitigate the risk of a compromise and ensure that your website possesses all of the latest bug fixes needed to protect your store and customers.
How to check if Magento store is compiled?
Download the patches specific to your Magento version from the Magento Downloads page. Upload the .sh or .patch files to your Magento root directory. If your Magento store is compiled, disable the compiler under System > Tools > Compilation. Test the Magento store to confirm functionality. Run the compiler if you disabled it in Step 4.
How to add a new admin to Magento?
Log into the Magento backend as an Administrator. From the Admin menu, select System > Permissions > Roles. Select the Add New Role button. Enter a name to describe your new Role. From the left hand panel, select Role Resources. Select the admin resource checkboxes that you want to grant for this role.