Passwords
The use of secure passwords has the highest priority. If insecure passwords are used, all other protective measures are ineffective. It is essential that you observe the following basic rules when selecting passwords:
- At least 15-20 characters long
- Mixture of upper and lower case letters, numbers and special characters
- Do not include any personal data (e.g. date of birth, name, year). Example of a bad password for a soccer club => Fu$ball1968
- Every user should have their own password - do not share passwords!
- Do not pin passwords to the screen on Post-It notes or leave them under the desk pad
- Change passwords every 6-12 months
- Never use the same password to log in to different services or websites
For the last point, it is advisable to use password manager software (who can remember all the different passwords?). The programs 1Password or KeePass are recommended. After entering a master password, the user is automatically logged in to the respective website. The database with the passwords can also be synchronized between different systems (Windows, Mac, iOS, Android).
Keep software up to date
We keep our server software (Linux, PHP, MySQL, Apache, utilities) up to date and security updates are installed promptly. So you don't have to worry about this yourself.
The TYPO3 versions pre-installed by us are automatically updated by us, provided they are officially supported and not outdated.
However, if you install other software (e.g. WordPress, Joomla, Drupal, Contao), you should always keep it up to date. Security updates in particular must be installed promptly.
Do not use FTP to transfer files
FTP (File Transfer Protocol) offers the possibility of exchanging files between your own computer and the web server (the homepage). With FTP, however, the transfer of data is always unencrypted, including user name and password.
As an alternative, we offer the use of SFTP (Secure File Transfer Protocol). Here, all data is encrypted before transmission.
In general, when using these programs, access should be restricted to the directory required to exchange the data.