Faire account security best practices

Faire helps you connect with new customers, manage your orders, and receive payments. Because it's a critical part of your business, it's important to follow security best practices — just as you would for your email, banking, and social media accounts.

Manage your team and permissions

Never share your login credentials with others. Instead, use Faire's team features to give each staff member their own individual access.

• Create individual accounts: Invite each staff member to join your team with their own unique login. This ensures that actions taken on the account can be attributed to a specific individual and allows you to revoke access immediately if a team member leaves the business.
• Follow the principle of least privilege: Only grant team members the minimum level of access they need to do their jobs. Use Custom permissions to limit access to sensitive information such as Payouts and Analytics.
• Protect the Primary Admin account: Only the person ultimately responsible for the business — such as the owner or wholesale manager — should hold Primary Admin status, as this role carries full control over the account.
• Update your password after inviting your team: If you previously shared your login credentials with staff, change your password immediately after setting up individual team accounts to ensure they can no longer log in using your credentials.

Use a password manager and a strong password

Use a password manager: We encourage using a password manager — such as Apple Keychain, Chrome Password Manager, 1Password, or LastPass — to generate and store unique, complex passwords for every account. Use strong passwords: For any online account, use long, random passwords with a mix of letters, numbers, and symbols. Your password manager can generate and save these automatically. Never reuse passwords across different websites.

Secure your email account

• Keep your email account private: Your login email should only be accessible to you. Faire sends security-related codes to your email address to verify your identity during sensitive actions.
• Enable Multi-Factor Authentication (MFA): Make sure the email account associated with your Faire account is protected by MFA. This prevents attackers from accessing your Faire account through your email account.

Avoid using public or shared computers

Avoid accessing your Faire account from public or shared computers. If you must use a shared device, always sign out and close the browser when you're finished.

To log out of your account, select your profile picture in the upper-left corner of your portal and choose Sign out.

Protect yourself from phishing emails

Phishing is an attempt by attackers to trick you into sharing sensitive information such as passwords or banking details. Follow these tips to protect yourself:

• Verify the sender: Always check the sender's email address and only open correspondence from trusted sources. Emails from Faire will always come from an @faire.com email address.
• Check URLs: Before entering sensitive information, verify that the address bar displays the URL you expect and that the site is secured by HTTPS (indicated by a lock icon).
• Be cautious with attachments: Only open links or attachments from sources you know and trust. Do not open attachments that are unexpected or appear urgent without first confirming with the sender.

You can find more information on protecting yourself from phishing emails here.

What to do when your account is compromised

If you suspect your account has been compromised, take these steps immediately:

1. Secure your email account: Log into your associated email account and change the password.
2. Reset your Faire password: Log in to Faire to change your password. If you cannot log in, use the Reset Password feature or contact Faire support.
3. Audit your banking details: Review your payout information and update it if anything appears incorrect.
4. Review account activity: Check your settings and recent orders to ensure no unauthorized changes were made.
5. Contact Faire support: Reach out to our support team for assistance resolving any issues or securing your account.
6. Work with an IT professional: If you opened a suspicious attachment or believe your computer may be infected with malware, work with an IT vendor to scan and clean your devices.

For more detailed guidance on securing your small business, consult these government resources:

• United States: FTC – Cybersecurity for Small Business
• Canada: Canadian Centre for Cyber Security – Guidance for Small Business
• EU: ENISA – Cybersecurity Guide for SMEs
• UK: National Cyber Security Centre