How Secure Is Squarespace?

In short - very. Squarespace keeps your site constantly monitored and in compliance with global privacy and payment standards. Making it infinitely more secure than a website built on Wordpress, Joomla or other unhosted platform.

Here are some of the things Squarespace does to keep your website secure:

SSL

All domains correctly added to your Squarespace site are automatically protected with free SSL certificates to improve security. SSL secures connections and prevents impersonation or stealing of visitors’ information.

DOS Attack Protection

DOS attacks are a common method used by hackers. Squarespace has implemented solutions designed to protect against and mitigate effects of Denial of Service (DoS) attacks. The fully-managed cloud hosting supports billions of monthly views and provides 99.9% uptime.

Login Activity

Use the login activity panel to review your account’s active login sessions and spot any suspicious logins from devices you don’t recognise.

Two-Factor Authentication

Add an extra layer of security and prevent unauthorized access to your account by enabling two-factor authentication (2FA).

Password Protected Pages

If required, hide individual pages behind passwords in page settings to prevent them from being publicly accessible.

Security Monitoring

Squarespace’s Security Operations Center (SOC) monitors for threats and vulnerabilities 24/7 to ensure your website is protected.

Data Privacy

The privacy and security of Squarespace customers’ data is a top priority. Squarespace work diligently to ensure they are prepared to meet the demands of global data privacy laws like GDPR as a company and for you.

PCI Compliance

All of Squarespace’s built-in payment processor integrations are compliant with PCI-DSS. Sensitive card data is never handled by Squarespace. It goes directly to the payment processor’s servers; Squarespace doesn’t have access to this information.