Back to Week 6
Checklist
Week 6
Security checklist for non-technical founders
Basic protections every product needs before real users sign up.
Accounts & data
- Users can only see their own data — test this with two accounts.
- Admin pages are protected, not just hidden.
- Passwords are handled by your platform's login system, never stored yourself.
- Don't collect data you don't need.
Keys & payments
- Secret keys (Stripe, OpenAI) are stored as secrets, never pasted into pages.
- Payments go through Stripe or similar — never handle card numbers yourself.
Before launch
- Run your builder's security scan and fix warnings.
- Add a privacy policy and terms of use.
- Turn on two-factor login for every tool you use to run the business.
- Keep a backup/export of your data.