Protect your Tapmy account

What should I do first?

Use a device and network you trust, with updates installed. Open Tapmy from a saved bookmark or by typing the address yourself, never from a link in an unexpected message. Make sure you can sign in to the email connected to Tapmy and that its recovery details are current.

How do I lock down my account?

1. Create a password you use nowhere else.
2. Keep it in a reputable password manager, not a shared document or chat.
3. Turn on multi-factor authentication in Tapmy if your account offers it.
4. Turn it on for your email account and your connected Stripe account too.
5. Store recovery methods safely and remove old phone numbers and addresses.
6. Review active sessions, devices, team access and connected services wherever Tapmy shows them.
7. Sign out sessions you do not recognize and remove access nobody needs.
8. Keep your browser, operating system, password manager and security software up to date.

Never give a password, one-time code, recovery code, API key or full card details to anyone claiming to be support. Real troubleshooting does not need them in a normal message.

How do I protect my business setup?

Give teammates their own accounts when the product allows, and do not share one login. Give each person only the access their role needs. When a contractor leaves, remove their access to Tapmy, email, files, domains, analytics and connected tools.

Protect your domain registrar, DNS, social, calendar, email and Stripe logins too. A break-in outside Tapmy can still hit your store. If a payout, domain, billing or public link changes, confirm it inside your official account.

Download customer data only when you must. Keep exports in encrypted or access-controlled places and delete temporary copies. Never paste exports into AI tools or public documents.

How do I spot fake messages?

Be wary of urgency, threats, surprise attachments, shortened links and requests for secrets. Open Tapmy yourself to see whether the same alert shows up in your account. Check the sender and the domain letter by letter.

After you change a sensitive setting, confirm it in your account and note when you did it. Do not post recovery information in screenshots.

What does a secure account look like?

• Tapmy, email, Stripe and other key accounts have unique passwords.
• Multi-factor and recovery options are current.
• Unknown sessions and unneeded connections are gone.
• Team access matches who does what now.
• Customer exports and recovery details are not exposed.

What if something is wrong?

If you cannot get into the connected email, recover that account with its provider first. If you see an unknown session or a change you did not make, follow Report a compromised account rather than experimenting. If a security option described here is missing in your account, do not assume it exists under another name. Note what you see and ask support.

No setting stops every attack. Regular checks and quick reporting matter.

What next?

Read Recognize phishing and fake Tapmy messages and Report a compromised account. If you doubt your account's safety, contact Tapmy Support from a trusted device, without sending credentials or recovery codes.