Protect the accounts that control your app
Turn on multi-factor authentication for every account that can change your app's code, configuration, infrastructure, or DNS, and remove access as soon as people no longer need it.
Any account that can change your app's code, configuration, infrastructure, or DNS can be used to put code on every store that uses your app, without a vulnerability in the code.
- Turn on two-step authentication for every Shopify account in your Partner organization.
- Require multi-factor authentication on your hosting, cloud, DNS, CDN, source control, CI/CD, package registry, error tracking, and email accounts. Email matters because it can reset the passwords for everything else.
- Give each person their own account with only the access that they need. Don't share logins.
- Remove access as soon as someone leaves or changes roles, including Partner organization access, store collaborator access, cloud and repository access, and any API keys or tokens that they created.
- Keep your emergency developer contact current in the Partner Dashboard, so Shopify can reach you quickly about a security issue.
Anchor to VerifyVerify
No app security check covers this practice, because it lives outside your code. Review it when people join or leave your team.
Was this page helpful?