MBA1512 3 Must Do Online Security Tips + Free Ride Friday
2 Feb 2026 · 12 min
Omar Zenhom covers three security moves for online businesses: enable two-factor authentication on domain, hosting, and email accounts; use a business email domain instead of Gmail; and turn on 2FA for banks and payment processors like PayPal and Stripe. Bonus tip: use Google Voice or Skype to prevent SIM-swap attacks.
Questions this episode answers
April 24, 2020
Henry Scullion
Lifetime access to EasyCourse, valued at $500
Chapters
Let me tell you about Intuit QuickBooks. When I was starting out my business, I remember sitting at my desk late at night not working on my business but cleaning up numbers, tracking and reconciling payments and wondering how this became my life. But once I automated the admin side of things of my finances, those nights had disappeared and I felt a whole lot better. Outdo it with intuit QuickBooks QuickBooks is the trusted end to end solution that businesses rely on for getting paid, managing finances, paying employees, finding new customers, and more. QuickBooks provides a team of AI agents and trusted experts, so doing it yourself no longer means doing it alone. Their payment agent gets you paid faster, their customer agent finds leads, follows up and secures more sales, and the accounting agent automates and categorizes transactions. Get your critical business jobs done with QuickBooks on the Intuit platform. Ready to save on new tech? It's time for Dell Tech Day's annual sales event celebrating our customers with fantastic deals and benefits. Perks include Dell rewards, free shipping, premium Support and more. PCs like the Dell 14 with Intel Core Ultra processors will help you do more faster and with a premium suite of monitors and accessories, you can upgrade your whole setup with amazing savings. Visit Dell.com deals. Hey, today is Free Ride Friday so make sure you hang on to the end of the episode to hear who won this week's Free Ride. Every Friday we give away a lifetime membership to one of our programs. We're giving away easy course, our 30 day course on how to build your own online course in 30 days. It retails for $500 over at EasyCourse co. Or you can win it for free. Just leave us an iTunes rating and review and you enter our weekly random draw. Just listen in on Friday to see if you won. It's that simple. It's our way to say thank you. Thank you for leaving us love on itunes. All right, let's jump into today's episode. Hey O. Welcome to the $100 NBA Show Daily Business Building goodness every single day with our daily 10 minute business lessons for the real world. I'm your host, your coach, your teacher Omar Zenholm. I'm also the co founder of the $100 MBA Accompli business training and Community Online. And in today's episode we're going to learn three must do online security tips if you run an online business. These are critical. There are actually three phases or three parts to your online security that's really, really important. We're going to go through your actual website security, your email because Your email is actually a gateway to a lot of hacks and your financials. So we're going to make sure that whatever you do online, that your security is top notch. These tips alone will prevent a lot of attacks. I learned this along the way in my over 15 years of experience of doing business online since 2002. Some of these I learned the hard way. So you don't have to learn the hard way. Just follow today's lesson and you should be good to go. So let's get into it. Let's get down to business. All right, let's jump into making sure your online business is secure and protected. The first phase or the first part we're going to look at is your website. This is the most vulnerable entry point to attacks, to spammers, to hackers. I'm going to give you some really important tips in just this area first and then we'll move on to the second phase. So let's talk about your website. The first thing you need to understand is your website is actually composed of a few parts. Okay? You have your domain name, which is like the name of your website, like 100- MBA-NET. This domain name gets registered in a domain registrar. It's like the address for your website. This is separate from the hosting of your website. This is like where your website is saved in the cloud on servers. So you basically tell your hosting provider, hey, this information, my website, the actual code, point it to the this address which is your domain, like webinar ninja.com now these two areas you're hosting in your domain are the most risky elements in your security. Because if somebody can take over your domain, they can change where they go when they go to your website, when they go to your domain name, when they go to like the domain of your business, like business. Com. And if they take over the hosting, then they can change the content of your website, which is even just as bad. So what are we going to do? So there's a few things we want to do that are low hanging fruit that can really save you a lot of headaches. What this basically does is just deters hackers to go to a site that's just, you know what, less secure, more vulnerable. This is going to shore you up. The first thing you're going to do is you're going to make sure your website has an SSL certificate. This is basically that little lock you see in your browser and that just means that you're running on HTTPs and not just HTTP. This means that your site is encrypted and is secure. This is quite simple to have an SSL certificate. Most website hosting providers will give you an SSL certificate for free or you can buy one really inexpensive $10 or something like that. Just reach out to the person that's hosting your website. Ask them, hey, I'd like an SSL certificate for my website. Can you please make sure that's installed and they'll take care of it. That's very low hanging fruit and that's going to also help you index better on Google to rank better. Now the next thing you're going, you're going to go to wherever you bought your domain, where you registered your domain. It may be the same place you hosted your site, but it may not be. It might be a registrar like Google Domains which I recommend or GoDaddy or domains.com. you're going to go to that account and make sure it has two step authentication. This means that if I have to log into my account I can't just log in with a name and password. The next step is something else I have to verify that's indeed me. Some of these services will have like SMS verification. They'll send you an SMS with a code and you put in the code. This isn't the most secure way of doing it, but it's better than nothing. So an SMS two step verification is fine. A more secure way is using an authenticator which is like using an app on your phone called Google Authenticator. It's absolutely free and you open up your authenticator and you put the code that you see in that moment when you're trying to sign in. This is a lot more secure than SMS because we'll talk later how you know, a lot of sims can get hacked and people can take over your sim. This is a very known trick in the hacker world. So what you want to do is step one, go to your domain registrar where you've bought your domain, where you registered your domain and have two step authentication. That way if anybody ever finds out your password or can get in, they can't get into your account because hey, they have another step they have to go through. They this prevents hackers from getting in. You're going to do the same thing with your hosting provider wherever you host your site, whether that's on hostgator, whether that's on WP Engine, whether that's Squarespace or Weebly or Amazon for that matter. So make sure when you sign into that account again, two step authentication. So your website is the front door to hackers and doing these Steps are going to help you be secure. It's going to allow you to just have the security needed to deter the hackers. But there's a backdoor and this is my second tip or my second phase of security, which is your email. Whatever email address or addresses you use with any of these accounts, like your hosting provider, your domain registrar, anything that you log in that has to do with your business or your banking or anything like that, you want to make sure that those emails as well, that email address has two step authentication. So for the sign into my email, I again have to go through that two step process. So go. If it's Gmail, make sure you turn that on. This is a feature that you that by default's off, but you can turn it on in your settings and make sure two step is there. Why? Because say for example they want to get into your account, they can hack your email and then from there they can ask for a password reset, go into your email, reset your password and then they're, they're through. So what you want to do is you want to make sure that the back door is closed too locked up. You, you have two step authentication in your email accounts. The other thing I recommend is that if you are running a team, if you have a team of members, don't use personal email addresses, use your domain email, especially if you're just by yourself too Solopreneur, use a domain email, don't use gmail.com or yahoo.com, it's a little bit more secure. And what's great about having using your domain email, say for example, you're using Google Suite to use your business email and everybody has you know your domain in their email. So for example, all our team members have webinar ninja.com as their email address. This allows me to remove access, add access, only give access to people with that domain to my files on G drive, sheets, docs, you name it. So it's a lot easier for me to restrict people that leave the company or you know, give restricted access to those who just join, who still on their first few weeks. The point here is that you have a little bit more control when you're running a business email address. The other thing is that if somebody leaves the company, you can just remove their business email address. And if they use their business email address for all the other services you use to run your business, whether it's your meeting software, whether it's your project management software, Trello, Jira, Slack, if they use that business email address that you Set up for them for all the services you use in your business to have access, to have an account. Then by removing their email, they don't have a way to reset their password. Of course you got to remove access from all the other services, but there's no backdoor. You can't do this as if everybody's using their own personal email. I recommend you do this with anybody you work with on your team, even if they're just a consultant part time. It's Gonna cost you $5 a month and it's gonna give you a huge peace of mind when somebody joins the team. So we talked about your website, your domain, your email, which is the backdoor to a lot of your security. Let's talk about your financials now. Anything financial, of course, again, two step authentication. So anything your business, bank account, your accounting software like Xero Stripe or your payment processor or like PayPal or Stripe, all these services. Two step authentication. The other thing you want to look at is look at the bank account that you're depositing money in as well as paying from, whether it's credit cards or your bank account where you're paying people or you're getting charged for services for your business. Make sure you have SMS notifications. So at least you get an SMS reminder or a notification when some transactions happen. If you see something that's a little bit outside the ordinary, you can catch it. You can call the bank immediately and flag it as fraud before it goes haywire, before it just is rampant charges on your account. If you have somebody who's going to be helping with your financials, an accountant, a bookkeeper, make sure you're not just giving them your login. They have their own account, they have a secure login. They also have two step authentication. Make sure that they are securely logging in. Only give them access that they need. This also goes to any other service in your business, any other account you're setting up. Make sure everybody on your team does two step authentication as well as giving them the access they need. Don't give more, don't give less. Also, be wary of anything that's connected to your bank account. So your PayPal account often has connection to your bank account. So if somebody's into your PayPal account, they basically can take the money out of your bank account or charge off your bank account or credit cards. So again, if you have a login, PayPal, two step authentication. Do not share passwords, do not share access unless they are a verified user and only give them the access they need. Be very careful about where you have those connections. Apple Pay make sure that if you have Apple Pay on other devices other than your personal device like your phone, maybe on your computer or on an iPad, that if you give it to somebody to use that you have security measures whether it's, you know, face ID or you have some sort of password. This is really important. You want to make sure that your financials are secure.
If your team isn't using ClickUp, you're wasting time and data proves it. 61% of knowledge workers manage work more than doing it. Switching apps a thousand times a day, that's work sprawl and costs millions. ClickUp replaces 20 apps with convergence, uniting projects, docs and chats while AI super agents handle the busy work. Join 4 million teams using ClickUp to to finish work 30% faster, try it free and get 15% off AI upgrades@ClickUp.com podcast that's CLI C K U P.com podcast Looking for a Valentine's gift she'll truly love? 1-800-Flowers.com knows what she wants. For 50 years, 1-800-Flowers has helped guys like you get it right. Delivering millions of fresh Valentine's roses nationwide. 1-800-Flowers offers premium fresh cut flowers backed by their seven day freshness guarantee plus same day delivery when you need them on time. Valentine's is coming up and bouquets are selling fast, so don't wait on this order today at 1-800-flowers.com sxm. That's 1-800-flowers. Com sxm.
Guys, we talked about your domain, your website, we talked about your email security, we talked about your financials. There's a bonus one. I know I talked about three, but there's one that's really important that I want to add and it's called your phone. Okay? Your phone number. A lot of us, we have a cell phone number and we use a cell phone number for everything. This is a big no no. Do not use your personal cell phone number other than your bank. So if your bank needs a phone number, give your personal phone number so you can get the SMS and verify. The only other exception is if there's any service that only gives SMS two step authentication. Sometimes they have the authenticator option or SMS verification. They if they only have an SMS verification, then you can give your personal phone number. So that way you can get into your account. Other than that, do not give your personal phone number out for anything. When you go to the pet store and they ask you for your phone number, no will they ask for your phone number anywhere? Else, for any kind of application or you're signing up for an excursion on Airbnb or whatever it is, use a Google Voice number. Google Voice numbers are great. You can also get a Skype number. I have a Skype number myself. It acts just like a phone. It rings right on my phone. If somebody calls me, I can make phone calls using the Skype app. I think it's really brilliant. But this is a phone number I use for everything else. Why? Because it's not connected to my SIM card. It's not connected to my actual phone. It's like a virtual phone number. The phone number that's connected to your SIM card is extremely dangerous if it goes out. If somebody knows your phone number has a few details. A lot of hackers can do what's called a SIM swap. They can swap your phone number and take all the data from your SIM card and swap it to an empty SIM card that they have on their phone. Which means, hey, I can get into anything that has your phone number connected. This happened and it has happened, okay? So do not do this, okay? Protect your phone number. Your personal cell phone number, like it's gold. Have a secondary phone number. Whether it's a Skype phone number or a Google Voice phone number. These are both really good options. I prefer the Skype phone number. It works really, really well and it's really inexpensive for you to have that peace of mind and security. And again, you use that for everything else. You give that to the pet store, all that kind of stuff. What's great about these phone numbers is that, hey, they are not going to text me. I don't get bothered with SMSs because it's just an actual number they call. Guys, that wraps up today's episode. I hope it was helpful. I hope that you take down notes and you implement these things asap. The sooner you do this, the more secure your online business will be. Today's episode's not over though. Because it's Free Ride Friday. We get to give away a lifetime membership to easy course, our 30 day course on how to build an online course. Let's do it. Who is this week's Free Ride Friday winner? And the winner is. Henry Scullion. Henry Scullion says Top Guests, Energy and topics. Five stars. I've been a subscriber since I bought Webinar Ninja back in 2016. And I listened to this podcast that finally inspired me to take action. And I created my mvp, which is called Speakeasy. I love it, not just because of the variety of topics but also for the guests and the content and the infectious enthusiasm. Thanks Henry for that amazing review. You are a Freeride Friday winner. Your mission is to email me over at omar@100nba.net so I can hook you up with the Lifetime Access to easy course at $500 value. If you want to win a free ride, just leave us an ITUNES rating and review and enter our weekly random draw. Listen in on Friday just like right now to see if you won. It's that simple. It's our way to say thank you for showing us love on itunes. Before I go, I want to leave you with this Security is one of those things that, you know, it's a little bit of a pain. You got to set things up. You got to make sure that everything's in order. It's an investment. You do this, you're going to feel better, you're going to sleep better at night. It's going to prevent a lot of problems that's going to cause you loss of money and a loss of customers. So make sure you secure up. These are some just basic things that you can do. This is not like super, super amazing tight security that a highly technical person can implement. This is somebody something that you can do yourself. That's going to prevent a lot of hackers getting into your website, getting into your business, getting into your money, into your pocket. So it's well worth the investment of time. Thank you so much for listening. I'll check you in Monday's episode. I'll see you then. Take care of. USAA knows dynamic duos can save the day like superheroes and sidekicks or auto and home insurance. With usaa, you can bundle your auto and home and see save up to 10%. Tap the banner to learn more and get a quote@usaa.com bundle restrictions apply.
