Home โ€บ Guides โ€บ Business Account Security Checklist for Small Businesses in India

Business Account Security Checklist for Small Businesses in India

For a small business, one hacked email account can mean fake invoices, stolen payments and a damaged reputation. This checklist takes about an hour and prevents most common attacks.

1. Secure your email first

Email is the key to everything else because password resets go there. Give it a long unique password, turn on two-step verification, and check the recovery phone number and backup email.

2. Use a password manager

Store every login in one place instead of a notebook or a spreadsheet. Generate passwords with a tool like our password generator. Read how to create a strong password.

3. Turn on 2FA everywhere that matters

  • Business and personal email
  • Net banking and UPI apps
  • GST portal and income tax portal
  • Domain registrar and hosting account
  • Social media and WhatsApp Business (use the two-step PIN)
  • Accounting and billing software

4. Beware of payment fraud

  • Verify any change of bank account by calling the supplier on a known number.
  • Check the sender's real email address, not just the display name.
  • Never share OTPs, UPI PINs or card details with anyone, even a "bank executive".
  • Remember that you scan a QR code only to pay, never to receive money.

5. Protect devices

  • Install updates on phones and computers.
  • Use a screen lock and device encryption.
  • Do not use cracked software.
  • Use separate profiles for staff, and remove access when someone leaves.

6. Back up your data

Keep copies of invoices, customer lists and accounting data in two places, such as cloud storage and an external drive. Test a restore at least once.

7. Limit access

Give staff only the access they need. Do not share one login among many people. Change passwords when staff leave.

8. Keep customer documents safe

Do not leave invoices and quotations with customer details on shared computers. Our tools keep your details in your own browser and do not upload your documents. See the quotation generator.

Monthly 10-minute check

  1. Review login alerts on email and banking.
  2. Remove old devices from your accounts.
  3. Check that backups ran.
  4. Update any passwords you suspect are weak or reused.