Deedhold

Everyone on the team sees only what they should. An admin under lock and key.

You let the whole team into the admin and set for each person which sections they may open. Login is protected by a second factor, a lockout after failed attempts and password rules. Sensitive data is stored encrypted.

Free assessment and demo

Who can go where and how they get in

You set permissions through roles, not for each person separately. And every login to the admin has two steps.

Who can go where in the admin Permissions table: three roles - Owner, Warehouse and Marketing - and six admin sections. The owner has access everywhere. Warehouse sees orders and the catalog with inventory. Marketing sees the catalog, marketing with content, and reports. Store settings and users and roles are seen only by the owner. ROLES AND PERMISSIONS Owner Warehouse Marketing Orders access access hidden Catalog and inventory access access access Marketing and content access hidden access Reports access hidden access Store settings access hidden hidden Users and roles access hidden hidden Access - the section is in the menu and can be worked in

Roles with permissions by section

You create a role, for example Warehouse or Marketing, and tick the admin sections it may work with. Then you assign the role to a user. Whatever the role is not allowed, the user doesn’t even see in the menu.

The number of admin users is unlimited. Everyone has their own account and their own login.

When someone leaves the team, you disable their account. Nobody else is affected.

The way into the admin Login diagram: first username and password, then a second factor from an app or a security key, only then the admin with sections based on the role. After repeated wrong passwords the account is temporarily locked, and time or an administrator unlocks it. Below: password rules - enforced strength, expiration and only one login per account. ADMIN LOGIN STEP 1 Name + password what only you know STEP 2 Second factor app or key DONE Admin sections by role WRONG PASSWORD and again AFTER THE SET NUMBER OF ATTEMPTS Account is temporarily locked unlocked by time or an administrator PASSWORD RULES FOR THE WHOLE TEAM Strong password Password expiration No sharing

Two‑step login

A password alone is not enough. After entering it, the admin also asks for a code from a phone app or a security key. Two‑factor authentication is part of the installation and is turned on.

After a set number of failed attempts, the account is temporarily locked. It unlocks after a set time, or an administrator unlocks it sooner.

You enforce password strength and regular password changes for the whole team. And you can prevent one account from being logged in in several places at once.

Protection for the store and comfort for the staff

Security is not only about login. And the admin should be comfortable even for those who spend all day in it.

Protection

CAPTCHA and Google reCAPTCHA protect forms in the admin and on the site from bots.

A Content Security Policy keeps foreign scripts out of the store’s pages.

Passwords, API keys and credentials for other services are stored encrypted.

Working in the admin

Every user saves their own filters and columns in the overviews, for example a view of pending orders.

Large edits and imports run in the background and you see their progress in an overview. Meanwhile you keep working.

System notifications and messages for the staff are right in the admin.

What else comes with it

Small things that decide whether the admin is really under control. All features → Security and operations →

Integrations

A separate key for each system

A connected accounting or warehouse system doesn’t get a person’s password, but its own access with limited permissions.

Lockout

Overview of locked accounts

The administrator sees which accounts are locked after failed attempts and can unlock them.

Sessions

Logout after inactivity

The admin logs the user out automatically after a set period of inactivity.

Roles

One change for everyone

You edit a role’s permissions and the change applies right away to everyone who has it assigned.

Want to let your whole team into the admin without worry?

Get my assessment and demo