Access security tool
Charity password and access security checker
Use this checker before adding more charity software accounts, changing suppliers, launching a campaign, or handling a staff, trustee, volunteer, or agency handover. It does not replace professional security advice, legal advice, or provider eligibility checks.
Control checks6Weighted around MFA, account ownership, recovery, and offboarding.
Risk areas6Email, finance, files, website, DNS, suppliers, and shared accounts.
PolicyNo invented discountsRecommendations link to source-checked benefit pages.
Data entryLocal onlySelections run in the browser and are not submitted.
1. Select the access area to review
2. Tick controls already in place
3. Tick urgent warning signs
How to use the result
- Fix email, identity, finance, website, and DNS ownership before expanding access to more tools.
- Prioritise MFA, named account owners, offboarding, recovery details, and shared-account replacement.
- Open the recommended benefit pages and verify current provider eligibility, regional rules, admin features, and implementation cost.
- This checker supports operational triage only. It does not replace professional security advice, legal advice, or provider eligibility checks.