Incep Digital
GuidesIncep Platform owner guide
Operations4 min read

Security

The admin is where your orders, customers and payment settings live, so it is worth a few minutes hardening.

Two factor authentication

/admin/security

Admin accounts can be protected with an authenticator app. Setting it up produces a set of single use backup codes.

Tip: Store the backup codes somewhere other than the phone running the authenticator. Losing both means losing the account.
Two factor authentication, backup codes and session control.

Sessions and email verification

/admin/security
Session revocation
Sign a session out remotely, for a lost laptop or a departing staff member.
Email verification
New accounts confirm their address before they can act.
Rate limiting
Repeated failed attempts are slowed down automatically.

Stored credentials

/admin/integrations/payments

Payment keys, AI keys and integration credentials are encrypted at rest and never shown back to you in full after saving. Replace a key rather than trying to read it.

Note: Paid digital goods are stored privately rather than merely behind an unguessable URL, so a shared link does not become a free download.