Security
Securing your email signatures
Protect your data and avoid risks with our security recommendations.
6 min read
Level: IntermediateA platform that changes the signature of all your employees must be carefully protected. Here are our recommendations.
Protect administrator accounts
- Enable two-factor authentication for administration accounts.
- Limit the number of owners and administrators.
- Remove access for people who change roles.
Apply the principle of least privilege
Assign each person the role they need: editor to prepare templates, approver to validate them, reader to view.
Validate before publishing
The approval workflow ensures no change reaches email systems without validation. It also protects against the insertion of malicious links.
Check the links
Banner links point to your own domains. Be wary of URL shorteners that hide the destination.
Track changes
The template history and the activity log show who changed what and when. Review them regularly.
Protect API keys
API keys grant access to company data. Store them in a secrets vault and revoke them as soon as they are no longer used.
