AI Blocks › Keep your store safe
Stop a stolen login from taking over your store
Describe your team and apps. Get a security score, a fix list, a sign-in policy and a phishing rule sheet.
Lock down your store logins and staff against takeover is a free AI workflow for the job "Keep your store safe". It guides your AI through several skills in order, passing each step's output to the next.
Free · No account · Made by AI Blocks · Level: beginner
What it does
Most store takeovers start with one stolen login. A leaver still has admin access, a shared password was reused, or a staff member typed a password into a fake page. Your platform protects its own servers, but it cannot protect a login you gave away. The steps close those gaps in order. First it splits the job between what your platform covers and what you cover, then scores eight basics such as two-step sign-in, leavers, apps and backups. It pauses so you can do the fixes marked for today. The second step checks sign-in itself, including password rules and account recovery, and writes the policy. It pauses again so you can share the policy and set up a password manager. The last step writes a rule sheet and a drill so staff spot fake login pages.
You give it
- Your platform, such as Shopify, WooCommerce or a custom store
- Everyone with admin or staff access, their role and whether they are staff or a contractor
- Your installed apps and the permissions each one has
- How people sign in, your password rules today and what support does on a forgotten password
- The accounts that matter most, such as store admin, email, ad accounts and your domain, and whether you use a password manager
- Store capture (optional)
You get
- A security score out of 100 across eight checks, with fixes ranked for today, this month and this quarter
- A sign-in score out of 100, ranked gaps and a one-page policy for passwords, second steps, recovery and risky changes
- A one-page phishing rule sheet in plain words, and a ten-minute drill with ten sample cases and answers
- A quarterly routine to keep it all current
Use it when
- You have staff, contractors or agencies with admin access and have never reviewed who still needs it.
- A phishing email or a strange login alert made you worry about your store.
- You are hiring or about to share access and want written rules before you do.
Steps
- Store security checkup: Describe your admin team and apps. Get a ranked security fix list, a score out of 100 and a quarterly routine.
- Sign-in security checker: Describe how staff and customers sign in. Get gaps ranked, a score out of 100 and a password and second-step policy.
- Staff phishing awareness brief: Give it your tools and team size. Get a one-page phishing rule sheet and a ten-minute drill with answers.
How to use it
- Download the handoff pack. It's a zip with HANDOFF.md and every skill file this workflow uses.
- Give the folder to Claude (in Claude Code, or as files in a Claude Project) and say "Follow HANDOFF.md".
- Copy your staff list and installed apps from the admin pages. Do not paste passwords or codes.
- When it pauses, turn on two-step sign-in for every admin, remove leavers and delete apps you do not use.
- Share the policy with your team, move everyone to a password manager, then run the drill.