Security

What we do for you

• The secure padlock (https) is set up on your Meridian address and your own domain, and renewed for you.
• Your site is kept apart from everybody else's. Each hosted site has its own files and its own records, and runs separately, so one site cannot read another's.
• Passwords are never stored as you typed them. We keep only a scrambled version that cannot be turned back into your password, so nobody at Meridian can read it.
• Wrong passwords are limited. Eight wrong attempts locks the sign-in for fifteen minutes.
• Forms on your site and in your studio are protected, so another website cannot trick your browser into submitting them.
• Uploaded files are checked for what they really are, not just what they are called.
• Nightly backups, stored separately. See backups.

Code you paste into your pages

If you paste your own code into a page (for example an embed from another service), anything that could run hidden programs or collect details is removed before it is saved. Your site sits alongside other photographers' sites, and one unsafe page could affect them all.

Embeds from YouTube, Vimeo, Spotify, Google Maps, Google Docs, Calendly and Jotform work normally.

What is yours to do

Use a good password

At least twelve characters. A short phrase you will remember beats a short jumble you will not, and anything containing "password" or "photography" is refused. Do not use the same password anywhere else.

To change it: press your name at the top right (on a phone, open the menu), choose Your account, and use Your password. See your account.

Turn on a code as well as a password

This means somebody who learns your password still cannot get in without your phone.

1. Press your name at the top right (on a phone, open the menu) and choose

Your account.

1. Under A code as well as a password, scan the square with an

authenticator app (Google Authenticator, 1Password, Authy or similar).

1. Type the six-digit code the app shows into The code it shows and press

Turn it on.

1. Save the eight recovery codes you are shown somewhere that is not your

phone. They are shown only once.

Give each person their own sign-in

Never share your password with an assistant or second shooter. Invite them under Team instead, so they only see what they need and you can remove them in one press. See your team.

Forgotten your password?

Press Forgotten your password? on the sign-in screen. We email you a link that works once and lasts two hours.