Skip to main content

Security Best Practices

Follow these best practices to keep your NetPad deployment secure.

Authentication​

  1. Use Strong Methods: Prefer passkeys or OAuth
  2. Enable MFA: Add multi-factor authentication
  3. Regular Reviews: Review active sessions
  4. Secure Email: Protect email accounts

Encryption​

  1. Rotate Keys: Regularly rotate encryption keys
  2. Secure Storage: Protect encryption keys
  3. Field-Level: Encrypt sensitive fields
  4. Connection Strings: Always use encrypted vault

Access Control​

  1. Least Privilege: Grant minimum needed access
  2. Role-Based: Use appropriate roles
  3. Regular Reviews: Review permissions regularly
  4. Monitor Access: Track access patterns

Network Security​

  1. HTTPS Only: Always use HTTPS
  2. Firewall: Restrict network access
  3. VPN: Use VPN for remote access
  4. WAF: Consider web application firewall

Data Protection​

  1. Backup Regularly: Regular backups
  2. Encrypt Backups: Encrypt backup data
  3. Secure Storage: Protect backup storage
  4. Test Restores: Test backup restoration

Monitoring​

  1. Audit Logs: Review audit logs regularly
  2. Error Monitoring: Monitor for errors
  3. Access Logs: Track access patterns
  4. Alerts: Set up security alerts

Updates​

  1. Keep Updated: Regular updates
  2. Security Patches: Apply promptly
  3. Dependencies: Update dependencies
  4. Vulnerability Scanning: Regular scans

Compliance​

  1. GDPR: Follow GDPR requirements
  2. CCPA: California privacy compliance
  3. Data Retention: Follow retention policies
  4. Privacy Policy: Maintain privacy policy

Incident Response​

  1. Plan: Have incident response plan
  2. Document: Document incidents
  3. Notify: Notify affected users
  4. Learn: Learn from incidents

Next Steps​