Your Kajabi account holds your sites, contacts, and settings, so keeping it secure protects your whole business. This article is for Heroes: account owners and account users with any role.

Use this article to build good security habits, recognize phishing emails, spot signs that someone else got into your account, and lock them out. If someone is in your account right now, go straight to "Resolve a compromised login" on this page.

For everyday login help, see Log in to a Kajabi account.

To prevent unauthorized access to your Kajabi account, build the habits in this section. Each one makes it harder for someone else to get in, or limits the damage if they do.

To protect your Kajabi login, use a long, unique password and turn on two-factor authentication (2FA). 2FA asks for a code after your password, so a stolen password isn't enough to get in.

We recommend a trusted password manager to create and store a different long password for every account you use, including your email, Kajabi, bank, and payment processor. You can test how strong a password is with a tool like security.org.

For the rules a Kajabi account password must follow, see "Password strength, reuse, and expiry rules" in Log in to a Kajabi account. To turn on 2FA, follow "Set up 2FA" in the same article.

We also recommend turning on 2FA for your email account and anywhere else it's offered, with recovery options set up. Anyone who can open your email inbox can reset your Kajabi password.

To keep your Kajabi account secure when other people help you, give each person their own account user login instead of sharing yours. That way no one shares passwords or 2FA codes, and you can suspend one person's login without changing your own.

We recommend not using the account owner, Co-owner, or Administrator login for day-to-day work unless you need to. Fewer logins with full access means less risk if one is compromised. To add account users and pick their roles, see Add and manage account users.

Phishing emails pretend to come from a company you trust, such as Kajabi, to get your password, 2FA code, payment details, or personal information. They often sound urgent or ask for payment.

To protect your Kajabi account from phishing:

To protect the devices you use for your Kajabi account, turn on antivirus software (such as Windows Defender) and a firewall on your computer.

Keep your operating system, browser, and apps up to date. Updates fix security holes that could let someone watch or control your device.

When you finish working on a shared or public computer, log out of your Kajabi account.

We recommend not using public WiFi to work in your Kajabi account, or in any account with sensitive information like your bank, because someone on the same network can intercept your data. If you need to work in public, use a virtual private network (VPN) or a mobile hotspot that you control.

To make sure you still have a copy of important Kajabi data, such as your contacts, if your device is compromised or something in your account is changed, we recommend backing it up regularly.

To download your contacts, see Export contacts. For other site content, see Back up site content.

These emails from Kajabi can be signs of unauthorized access, meaning someone else is using your login:

Other signs of unauthorized access include:

If you think someone got into your account but you haven't seen any of these signs, still follow the steps in "Resolve a compromised login" on this page.

To secure your Kajabi login after unauthorized access, do every step: