If you’re running core web properties on Netlify, then protecting access to your account isn’t just a nice-to-have, it’s a key safeguard to the health of your business. At Netlify, we’ve kept a close watch for fraudulent logins to your account – but we saw room to get even better.
Today, we announce big improvements that help prevent account takeover, keeping your web apps running reliably and your content protected.
The changes impact how we identify and communicate suspicious logins for users that are part of a Netlify Pro, Business, or Enterprise plan.
First, we added an advanced machine learning engine to track and score every login based on its fraud potential. And as machine learning goes, it will only get better at detecting threats over time!
Next, we added email notifications to alert users whenever a login exceeds a fraud threshold. In that email, we specify time of login and information about the device, including the IP address, operating system, and browser type.
Best of all – there’s nothing you need to do to enable this new functionality. We’ve turned it on for all Pro, Business, and Enterprise plans. Learn more about our plans at netlify.com/pricing.
Of course, security is best applied in layers – and this new functionality of scoring and alerting users to suspicious logins is just one more tool to keep your account protected. There are a few other best practices we recommend to keep your account locked down from external login threats.
Two-factor authentication
Remember, we always recommend enabling two-factor authentication in your account – this is a feature that’s available on all plans, from Starter to Enterprise. This provides token-based protection in addition to a username/password and works with popular authentication apps like Authy, Google Authenticator, and 1Password.
#netlify