Account and confidentiality
Secure your customer account and personal data
A merchant account may contain registered addresses, orders, means of payment and purchase orders. Protection begins before the order and continues after delivery.
Quick response
Essential in a minute
Use a single, long password, activate double authentication when it exists and protect the email address that is used to reset other accounts. Enter only the necessary data, avoid saving a card without need and check the connected devices. In the face of an alert, return directly to the site or application instead of using the received link. After compromise, change the password of the courier and then the merchant account first.
1. Create identifiers that do not spread
Re-use turns an isolated leak into a risk for multiple services. Choose a password phrase or use a recognized manager to create a different secret for each account. Do not store your passwords in an unprotected file and never send them by message. When the service offers additional authentication, activate it and keep the recovery codes in a separate location.
- Password separate from the email.
- Double authentication enabled if available.
- Emergency codes kept out of the account.
2. Reduce retained data
A delivery requires some information, but not all of the personal preferences and dates requested are always essential. Reread the optional fields, refuse unwanted marketing uses and check if the credit card really needs to be saved. In an old account, delete obsolete addresses and review the devices or sessions that are still active. Downloading useful invoices does not mean having to keep the account indefinitely.
- Optional fields identified.
- Old addresses deleted.
- Registered card only so useful.
3. Read an alert without following its scenario
A parcel, refund or connection message may seek to cause an urgent action. Do not use its button to log in. Open the site from a favourite or enter its address, then check commands, internal messages and login history. Do not communicate password, single use code, or full copy of an identity document to an unexpected contact person.
- Independent navigation of the message.
- Order found in the account.
- No code communicated to a third party.
4. Respond in the right order in the event of an incident
If you think that an account is compromised, secure the associated email, change the passwords reused and close the unknown sessions. Check orders, cards, assets and contact details. Notify the merchant and bank if an operation appears. Keep alerts and captures without publicly disseminating your information. A hasty deletion can remove useful elements: first export the necessary history.
- Secure mail priority.
- Sessions and controlled commands.
- Evidence saved before deletion.
Compare
Prioritize protections
| Element | Principal risk | Action |
|---|---|---|
| Message | Resetting accounts | Unique password and 2FA |
| Merchant account | Orders and assets | Sessions and alerts |
| Registered card | Undesirable payment | Remove if not necessary |
| Delivery address | Obsolete personal data | Update or delete |
Before you continue
Final checklist : Protect your customer account
Check the points you actually checked. Checks stay in this page during the visit; they are not sent to the server. A checked point does not constitute a validation of the merchant.
Guide: Protect your customer account · Révision éditoriale : 17 October 2026.
Frequently Asked Questions
Useful answers
Should an account be created for each purchase?
Use the guest mode when it meets the need. If an account is required, provide the minimum useful and keep the important supporting documents yourself.
Can a browser save my passwords?
An integrated manager can help generate unique passwords on a personal device protected. Avoid recording on a shared or uncontrolled position.
Do I have to send ID to support?
Ask why it is necessary, what parts can be hidden and how it will be transmitted. Never send a complete document in response to an unexpected message.
To check
Reference sources and documentation
This guidance draws on French and European sources. For a cross-border purchase, check the seller’s country, your country of residence and the type of contract. The language of this page does not determine the rules that apply. Consumer rights in the EU — Your Europe.
The editorial update date does not guarantee a new verification of each source. See the references for an individual situation or regulatory evolution.
- CNIL — Tips for a good passwordAn account, password, storage and double authentication.
- DGCCRF — Secure Internet PurchasesAccount, seller, payment and alertness to messages.
- Your Europe — Consumer rights in the EUScope of consumer rights for purchases in the European Union.
Putting into practice
Explore relevant shops
Continue
Other purchase guides
Professional procurement
Choose business SaaS software
Compare functions, cost per user, limits, contract, security and data export before you subscribe to professional software online.
Read the guide
Dematerialized procurement
Choose a digital product
Download, account, device, access duration and updates: check what you actually buy before you pay.
Read the guide
Telecommunications and subscriptions
Compare mobile and broadband plans
Coverage, eligibility, debit, price after promotion, commitment and equipment: compare a telecom offer according to your address and usage.
Read the guide