Security Steps

Contents

• Static IP Settings
• 2-step Authentication
• Password Protected Directory

Static IP Settings
• If you are a single admin and using a Static IP, then it is better to enable Static IP option so that no one else can login to your account apart from you.Kindly follow these steps for the same:
  
  • Open AdminPanel
  • Click On Settings

  

  • Click On Security Settings

  

  • Select Use Static IP :Yes
  • Click on "Update"
  • Once you Update, you are secured and no one else will be able to login to your account.
2-step Authentication
• You can use Google’s 2-Step Verification, which is a latest and safest security measure.Kindly follow these steps for the same:
  
  • Open Adminpanel
  • Click On Settings

  

  • Click On Security Settings
  • Click On 2-Step Verification Settings
  • Select Enable Google 2-Step Verification: Yes
  • There are two ways to Google 2-Step Verification:
    
    1) QR Code
    
    2) Secret Key
  • 1) QR Code
  • If you are planning to setup 2-step Authentication via QR Code, then please follow these steps:
  • Select A Means To Set Up Google 2-Step Verification: Choose QR Code
  • Admin Password : Enter your Admin Password here
  • Click on Update

  

  • Now in the next step you will need to download the Google Authenticator App

  Download Of Google Authenticator App Available for Android, iOS and Windows. Click on the below respective operating system to download the App.

  
  

  Steps to Follow to Scan Image in Device:
  
  • In the Application, click on the top Right hand side
  • Click On Set Up Account
  • Click A Scan a barcode
  • Now, put your device in front of the Image and scan the image.

  
  
  

  • The steps above are for Android App. There may be some difference in location of menu in iOS (Apple) and Windows.
  • Enter The Code Generated Here  : You need to enter the code that is generated after scanning the image here
  • Click on Update

  
  
  

  • Now Success of your 2-step Authentication on Your site : Click Here
  
  
  • 2) Secret Key
  • If you are planning to setup 2-step Authentication via Secret Key, then please follow these steps:
  • Select A Means To Set Up Google 2-Step Verification: Choose Secret Key
  • Admin Password  : Enter your Admin Password here
  • Click on Update

  

  • Now in the next step you will need to download the Google Authenticator App

  Download Of Google Authenticator App Available for Android, iOS and Windows. Click on the below respective operating system to download the App.

  
  

  Steps to Follow to Secret Key in Device:
  
  • In the Application, click on the top Right hand side
  • Click On Set Up Account
  • Click A Enter provided key
  • You will need to enter the following information for Manual account entry
  • Enter account name : Just enter some reference here or maybe your website name.
  • Enter your key : You need to enter the key here that is generated after you click on Update.
  • Time based : If you choose time based token, then the number will change on its own after every few seconds. You will need to enter the token before the timer ends.
  • Counter based : If you choose counter based token, there is no restriction on the time on when to enter the code. You can refresh a button to change the code.

  
  
  

  • The steps above are for Android App. There may be some difference in location of menu in iOS (Apple) and Windows.
  • Enter The Code Generated Here  : You need to enter the code that is generated after fulfilling above steps here.
  • Click on Update

  
  
  

  • Now you are secured.
  • Next time, when you log in to your Admin Panel after entering the admin area details, you will get an Authentication Code window. You just need to get the code from your Google Authenticator Application and you need to enter it in the Authenticator Code as below:

  

  Note : If you enter the code and if it does not work, then it is best to close the application and start it again and enter the code displayed.

  
  

  Note : If you want to use Google 2-Step Verification for Member's Area, then set as displayed in the below image.
  Enable Google 2-Step Verification:Yes
  
  
  Click on Update
Password Protected Directory
• You can make your admin area password protected from cPanel. Kindly follow these steps for the same:
  
  
  • Open cPanel
  • Click on Password Protect Directories

  

  • Click the folder icon to select directory path admindirectory
    Click on adminpanel directory name
    Path: public_html/app/webroot/adminpanel

  

  • Next Create User

  

  • Next check on checkbox next to “Password protect this directory” and enter "adminpanel" in the field “Enter a name for the protected directory”. Then click on Save button.

  

  • You will see next page with"Permissions Updated"