Security

Clear control over your store

Decide who can access what, what goes live and how shoppers reach you.

Your store dashboard at the centre, surrounded by layers of control: two-factor sign-in for your account, staff who see only what you allow, store data scoped to your store, storefront changes that stay private until published, verified domains with HTTPS, and payments into your own bKash merchant account.

Accounts

Access starts with the right person

Everyone signs in as themselves. No shared passwords.

  • Invite staff by email, each with their own login
  • Two-factor sign-in with recovery codes
  • Suspend or disable staff anytime

Team

Everyone has their own login.

Staff permissions

Give staff only the access they need

Choose what each person can see and change.

Staff permissions

Sensitive area

Owner: Full access, including staff and settings.

  • ProductsManage
  • OrdersManage
  • CustomersManage
  • Revenue & analyticsManage
  • Storefront designManage
  • PaymentsManage
  • CouriersManage
  • DomainsManage
  • SettingsManage
  • StaffManage

Example roles. Adjust any area to view or manage.

  • Role presets
  • View or manage, per area
  • Staff activity log
Storefront changes

Edits stay private until you publish

Shoppers keep seeing your live store while you work on a draft.

  • Preview on desktop, tablet and phone
  • Publishing can be limited to staff you choose
  • Restore any of your last 20 published versions

Theme

Live store and draft start the same.

Domains & HTTPS

Your domain, verified and on HTTPS

Connect a domain you own whenever you're ready.

  • Verify it in a few guided steps
  • HTTPS set up once it's verified
  • Your UrShop address keeps working

Domains

Add a domain you own.

Payments

Payments go to your own account

Connect your bKash merchant account. Cash on delivery always works.

  1. Your bKash accountConnected by you
  2. CheckoutbKash appears once enabled
  3. OrderUpdates when bKash confirms
  • Totals priced on our servers
  • Secure COD, enabled per store
  • Courier credentials stored encrypted
Customers & orders

Better information. Your decision.

Checks and controls for problem orders. You decide what happens.

  • Fraud Checker shows courier history. It never cancels orders
  • Block customers by phone, email or IP
  • Approve, hide or delete reviews

Orders

A new cash-on-delivery order arrives.

  • Promotional SMS opt-out
  • Guest checkout always available
  • Tracking needs the order's phone number
Your store's space

Your data stays with your store

Customer and order information is scoped to the store where a shopper gives it, and isn't meant to be shared with unrelated stores.

Read our Privacy Policy →

Your part

Security works best when it's shared

A few habits that keep your store safe.

  • One login per person
  • Turn on two-factor
  • Grant only what's needed
  • Remove access when people leave
  • Preview before you publish
  • Keep account details private

No online service can guarantee absolute security. Think your account is compromised? Contact us.

Run your store with the controls you need

Start with your own login, invite your team when you're ready, and publish only when it looks right.

Explore all features

Questions about accounts and staff? Read the FAQ or contact our team.