Malware Report: Protecting Customer Accounts and Site Security
Customer accounts increase repeat spending and help build stronger relationships with visitors. They allow customers to securely store payment methods, shipping addresses, shopping carts, and order information.
Prerequisites
- SSL enabled with Secure preference
- Checkout enabled on your domain
Enabling Customer Accounts
- Open the Selling panel
- Click Customer Accounts
- Turn on the toggle
Account Access
- Customers can log in via automatic navigation links
- Account links display as "Login" or "Account" depending on login status
- Manual login links can be created using
/account/login
URL
Account Management
- View all accounts in the Contacts panel
- Filter contacts by "Has account" option
- Administrators can delete customer accounts except those with active subscriptions
- Deleting an account removes payment and shipping information but preserves order history
Payment Methods
- Stripe/Squarespace Payments users can save credit cards
- Only last four digits visible for security
- Apple Pay users must be logged in before checkout
- PayPal accounts cannot be saved
Email Communications Automatic emails sent for:
- Account creation
- Email verification
- Password reset/update
- Custom notifications based on user type
Security Features
- Email verification required
- Self-service password reset
- Secure payment information storage
- Optional guest checkout available
Digital Products Integration
- Automatically enables customer accounts
- Provides access to gated content
- Password-protected member areas
Disabling Accounts
- Ensure no active subscriptions exist
- Open Selling panel
- Click Customer Accounts
- Turn off toggle
Note: Disabled accounts hide customer information but preserve data if re-enabled later.
Remember: You cannot require account creation for checkout, and orders placed while logged out won't appear in customer account history.