User Details & Password

[steveb]

For all Accountants and Bookkeepers please ensure you keep your log on details totally confidential and that also means ensuring it is unique i.e. not used on any other on-line log in site, because if your details are harvested its the key to every client door. We know that unathorised access to client data files can happen as it has happened to our clients. The log on details of a user were obtained by professional hackers and the Bank account details were altered for suppliers and without being aware of the change, payments were made to a different bank account and the monies were lost, so dont think it can't happen to you because it can.

Use the two factor authentication security system that MYOB now has available and even if the on-line crooks get your user details they wont be able to log on to MYOB without the code which effectively means they would also need to have your mobile phone. Also change your password regularly and as its difficult to always remember your password if it is changed regularly, ideally use one of the encrypted software programs that will securely store all of the different paswwords you need for the numerous on-line sites and programs you need to access regularly.

Hackers are likely to target Accountants and Bookkeepers because by obtaining the log on details of one user, they could access everyone of your clients. Unfortunately MYOB's reporting of unauthorised access like a lot of things they do, is totally inadequate and they havent made all users aware that this is a problem, so regularly review your log on reports and possibly noting log ins done putside of normal user times you could detect possible breaches. The best defence though to the damage the hackers can do is an effective secure password policy for all users in your Practice and the same goes for your client's businesses.