Login Security

Maintaining an attractive and useful Web site is hard enough without having to worry about accidents happening to your pages.  There are many things you can do to ensure that you login information, as well as your Web site in general, is always secure.  Following these steps can help guarantee that every detail about your Web site is under control.

Username and Password
Your WebMedley password, like every password should never be obvious.  When changing your password or creating one for the first time, try to incorporate letters as well as numbers.  This will make your password exponentially harder to crack.  Also, your password should be changed throughout the year.  It's always a good idea to change your password every few months.  This will make the security of your Web site even higher and guarantee its safety. 

Taking full advantage of Users and Groups
The users and groups feature of your WebMedley Web site is extremely valuable and can aid in making your site "air tight" in security.  Here are a few tips on how to use this feature to its full potential.

• First and foremost, never ever delete the Administrative user, or the Administrative group.  These were the first user and group created on your account, and are at the top of the list of users and groups.  Commonly, your admin user is under the name of the person whose name is on your account, and the administrative group commonly is under the name of the organization.  If, for example, the person who is the administrative user is no longer with the organization, do not delete the user, but simply rename the user to something like "Admin User".  Also, rename the group at the top of your list to "Administrative".  This will allow you to never worry about deleting the Administrative user or group.
• Give every one their own username and password.  There is no limit to how many users you have on your site.  Therefore, giving everyone their own can help you tailor your Web site for every user. 
• Take advantage of the permissions feature.  Giving users certain permissions for certain pages doesn't mean that you don't trust those that edit your Web pages, but it helps reduce the risk of pages accidentally being overridden or deleted.  It also protects the other users, groups and media libraries. 
• Delete old users that aren't involved with your Web site.  Anyone that is no longer involved with your organization, or is no longer working on your Web site should have his or her User id deleted.  This will drastically reduce the risk of accidents. 

Create a second "Admin Group"
A WebMedley user cannot add or delete media libraries unless they are in the Administrative group, or created that library themselves.  WebMedley users can also not edit users, groups, or the relationships between them unless they are in the Administrative group.  If you would like someone to be able to completely manage any page on your site, simply create a new group and give that group "manage" permissions for all the pages.  This will allow anyone in that group to do anything to your pages, but they cannot edit the users, groups, or the relationships between them.

Read more on Users and Groups on our Hints and Tips newsletter about managing Users and Groups.