Guides · Nigeria, Ghana and Sierra Leone
Security basics for an NGO or church website and email
Most attacks on small organisations succeed through weak passwords, old software and shared logins, so fix those six things first: passwords, two-step sign-in, backups, updates, access and a plan for when something goes wrong.
1. Strong, different passwords
Use a password manager so every account has its own long password. One reused password lets an attacker into everything.
2. Two-step sign-in
Turn it on for email, the website admin and social media. It stops most stolen-password attacks.
3. Backups you have tested
Keep a recent copy of the website and your donor or member records somewhere separate. Restore one as a test, because an untested backup is a guess.
4. Updates
Update the website software, plugins and the devices staff use. Old software is the most common way in.
5. Who has access
- Give each person their own login, never a shared one.
- Remove access the day someone leaves.
- Give people only the access their job needs.
6. A plan for when something goes wrong
- Know who to call and write the number down.
- Know how to take the site offline and change passwords.
- Tell the people affected quickly and plainly.
By the Migher World Technologies team. Published 2026-11-09.