Securing business data and credential hygiene

• Give each person their own login. If everyone shares one password, you cannot tell who changed prices, stock, or took a return—and fixing mistakes gets much harder.
• When someone leaves the job, remove or disable their user in Staff as soon as possible. An old account they can still open is a security risk.
• On a shared shop computer, log out at the end of a shift. Closing the window is not always enough; staying logged in means the next person acts as you.
• Do not send payment card details, OTP codes, or subscription links in WhatsApp groups or public chats. If a secret leaks, support may need time to secure the account—prevention is faster.

If you see a login from a place you do not recognise, check with your team first (someone may be using VPN or mobile data that shows a odd city) before assuming fraud.