Strengthening Magento 2.4 security and recommendations for protection
I would like to ask about improving the security of a Magento 2 store. We have version 2.4 and have already implemented basic security measures such as system updates and installing extensions to protect against brute force attacks. However, I would like to know what additional steps should be taken to strengthen the protection, especially regarding access to the admin panel and preventing vulnerabilities. For example, what security extensions can you recommend or what settings should definitely be checked to minimize risks?
5 visualizações
To improve the security of Magento 2.4, Amasty experts recommend several steps. First, use the magento security extension, which provides features to protect against attacks, including improved authentication and protection against XSS and CSRF attacks. Second, set up two-factor authentication (2FA) for access to the admin panel and change the URL of the admin panel to reduce the likelihood of attacks. It is also recommended to carefully configure access rights for different users and regularly check the logs for suspicious activity. Make sure that all important security settings, such as SQL injection protection and setting up the correct access rights for files and folders, are applied.