A hacked business page is a disaster. The criminal can lock the owner out, delete years of posts, and worse, use the trusted page to ask followers for MoMo payments for goods that do not exist. As the person managing the page, you are a target too, because your account has access. Security is part of your job, not an extra.
Two step verification
Two step verification (also called two factor authentication) means logging in needs your password plus a second proof, usually a code. Even if someone steals your password, they cannot get in without the code.
- Turn it on for every account that touches client pages: your Facebook and Instagram accounts, TikTok, LinkedIn and the email account linked to them.
- Prefer an authenticator app where offered, such as Google Authenticator or Microsoft Authenticator. Codes from an app are generally safer than SMS codes, which can be intercepted if someone takes over your SIM.
- Save backup codes. Meta and other platforms offer recovery codes. Generate them while you still have access and store them somewhere safe and offline, such as a notebook kept at home.
Recovery details
Check that each account has an email address and phone number that the right person controls today. An old number from a lost SIM or an ex staff member's email is a back door. For client pages, the owner's own account should have current recovery details too.