DocumentationCommerceAdmin Systems Guide

Security

Last update: Fri Dec 01 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

  • Beginner
  • Intermediate
  • Admin
  • Leader

There are multiple ways to secure your store and maintain your data security:

NOTE
Stores that have enabled Adobe Identity Management Services (IMS) authentication have native Adobe Commerce and Magento Open Source 2FA disabled. Admin users who are logged into their Commerce instance with their Adobe credentials do not need to reauthenticate for many Admin tasks. Authentication is handled by Adobe IMS when the Admin user logs into their current session. See Adobe Identity Management Service (IMS) Integration Overview.

Visit the Security Center to get the latest news about potential vulnerabilities, register for Adobe Security notifications, and access the Adobe Trust Center.

w-700 modal-image
Security Center

For information about security best practices, see Secure your Commerce Site and Infrastructure in the Implementation Playbook.

Security action plan

If you suspect that your Adobe Commerce or Magento Open Source site is compromised, follow this action plan without delay.

  1. Diagnose: Run a scan to establish the security status of your Commerce store. Commerce Security Scan is a free service offered by Adobe that allows you to monitor your Commerce sites for known security risks and malware, and to receive security notifications.

  2. Clean: Hire a qualified consultant or online service to clean your site of all malicious code. Some Commerce community members recommend Sucuri Website Malware Removal. Check the /media folder for leftover executable code. Remove all unknown Admin users and reset all Admin passwords.

  3. Protect: Keep your Commerce installation up to date with the most current release. If you are using an older version, apply all security patches as they become available. Review and follow Commerce security best practices. Subscribe to Commerce Security Alerts.

  4. Report: If you think that you have found a specific vulnerability in Commerce, open an issue with Adobe and include technical details.

  5. Upgrade: For the additional peace of mind that comes from 24/7 support, plan your upgrade to Adobe Commerce on our Cloud Architecture now.

recommendation-more-help
d3c62084-5181-43fb-bba6-1feb2fcc3ec1