Tech & Security

Keep accounts, email and donor data safe.

Two-step login for every staff account

Most account takeovers start with a reused password:

Who this is for: anyone with email, giving admin, or website access
Turn on two-step verification (2FA) in Google, Microsoft, and your giving tool
Prefer an authenticator app or security key over SMS when you can
Use a password manager so each account gets a unique password

Free starting points: your Google or Microsoft account security page, and the 2FA guides inside Zeffy, Planning Center, or similar tools you already use.

Who should hold the keys to your domain

Your domain is the front door. Treat registrar access like the building keys:

Register the domain in the organization’s name, not a volunteer’s personal email
Keep at least two trusted admins on the registrar account
Turn on registrar lock and 2FA
Document where DNS is managed (often Cloudflare) and who can change it

On every Tamarack plan the domain stays in your name. We help with setup and hand over admin access.

General information, not legal, tax, or financial advice. We do not write or submit grant applications. Free official sources: Grants.gov, idahocf.org, candid.org.

PRIVATE PREVIEW