Blog

Don't Get Hacked: Encryption Best Practices

Blog

Don't Get Hacked: Encryption Best Practices

Blog

Don't Get Hacked: Encryption Best Practices

Blog

Don't Get Hacked: Encryption Best Practices

Blog

Don't Get Hacked: Encryption Best Practices

Download PDFDownload PDF
Blog

Don't Get Hacked: Encryption Best Practices

Heather Mueller
/
September 29, 2014
Blog

Don't Get Hacked: Encryption Best Practices

MIN
/
September 29, 2014
About the Episode
Episode Highlights
Meet our Guest
Episode Transcript

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Blog

Don't Get Hacked: Encryption Best Practices

Blog

Don't Get Hacked: Encryption Best Practices

Get the Report

Not a valid e-mail address

Great, thank ya!

You can now access the content.
Oops! Something went wrong while submitting the form.
Blog

Don't Get Hacked: Encryption Best Practices

Panelists
No items found.
Introduction
Introduction

Great, thank ya!

You can now access the content.
Download NowDownload Now
Oops! Something went wrong while submitting the form.

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Panelists
No items found.
Infographic

Don't Get Hacked: Encryption Best Practices

If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers.
Download InfographicDownload Infographic

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Collecting payments with online forms is easy, but first, you have to choose the right payment gateway. Browse the providers in our gateway credit card processing comparison chart to find the best option for your business. Then sign up for Formstack Forms, customize your payment forms, and start collecting profits in minutes.

Online Payment Gateway Comparison Chart

NOTE: These amounts reflect the monthly subscription for the payment provider. Formstack does not charge a fee to integrate with any of our payment partners.

FEATURES
Authorize.Net
Bambora
Chargify
First Data
PayPal
PayPal Pro
PayPal Payflow
Stripe
WePay
ProPay
Monthly Fees
$25
$25
$149+
Contact First Data
$0
$25
$0-$25
$0
$0
$4
Transaction Fees
$2.9% + 30¢
$2.9% + 30¢
N/A
Contact First Data
$2.9% + 30¢
$2.9% + 30¢
10¢
$2.9% + 30¢
$2.9% + 30¢
$2.6% + 30¢
Countries
5
8
Based on payment gateway
50+
203
3
4
25
USA
USA
Currencies
11
2
23
140
25
23
25
135+
1
1
Card Types
6
13
Based on payment gateway
5
9
9
5
6
4
4
Limits
None
None
Based on payment gateway
None
$10,000
None
None
None
None
$500 per transaction
Form Payments
Recurring Billing
Mobile Payments
PSD2 Compliant

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Freaked out about all of these data breaches in the news? We understand-- it's easy to feel vulnerable to hackers. If you capture personal data online, you must encrypt it. Encryption protects your data and makes your company more credible in the eyes of consumers. Heck, even Google is factoring in encryption when ranking websites.

There are piles of encryption guides and best practices for the tech-savvy IT specialist. But how can the rest of us know if we’re doing everything possible to secure and protect the sensitive data we collect? No, you don’t need to stop collecting credit card numbers and require cash. (Your profits would tank!) Instead, let us help you evaluate your day-to-day online operations.

Best Practice #1: Understand what’s sensitive…and what’s not.

Forms that require social security numbers, credit card numbers, bank routing information, and other personal info absolutely needs extra protection. But a survey to uncover preferences between boxers and briefs? Probably not the time to add an extra layer of security.

Best Practice #2: Get to know your encryption options.

Secure Sockets Layer (SSL) is the most-used technology for protecting traffic of sensitive information between your browser and Internet servers. It's also very powerful. Even the standard 128-bit SSL (Formstack uses 256-Bit) would take a trillion years to hack, by some accounts.

Database encryption protects data “at rest.” Formstack’s Encryption is so secure that if you lose your password there’s no way to access stored data. Not even our staff can get to it!

Email encryption can be used to secure sensitive data you email to yourself or others.Formstack users are required to enable all three of the above options when collecting, sending, or storing sensitive data.

Best Practice #3: Ask vendors how they keep your data safe.

It’s not enough to encrypt data. These days, you have to encrypt it well. SSL, database, and email encryption can add a valuable layer of security to the critical data you collect and store, but only if the encryption is done correctly.

Technology that worked a decade ago is easy to hack today, so make sure your vendors are using the most advanced methods possible. And unless your internal team includes cryptographic specialists with years of experience, avoid “home-brewed” solutions.

Best Practice #4: Back up your backups.

If your company stores a backup of sensitive data in another location (many do), be sure it’s encrypted in every environment.

Best Practice #5: When in doubt, encrypt.

If you find yourself questioning the sensitivity of data you’re handling, it’s always safest to enable encryption. Just be sure to secure your own access. (No taping passwords to the backs of staplers!)

Breathe easy with Formstack

Don't worry: your data security is our highest priority here at Formstack. Want to try out our secure online form builder? Sign up for a free trial here!

Heather Mueller
Heather is a website copywriter and digital content strategist who loves helping brands generate leads through the power of the written word—especially when using Formstack. Connect with Heather on Twitter @heathermueller.
More Articles
Meet The Host
Content Marketing Manager
Connect
Lindsay is a writer with a background in journalism and loves getting to flex her interview skills as host of Practically Genius. She manages Formstack's blog and long-form reports, like the 2022 State of Digital Maturity: Advancing Workflow Automation.