2 min read
Steps
- Users: remove anyone who has left; downgrade anyone with more access than they need — see roles and permissions.
- Administrators: confirm there are still two.
- 2FA: check it's active on your login and your recovery codes are safe.
- Sessions: scan your devices and remove anything unfamiliar.
- Alerts: confirm they go to a monitored address.
Good to know
Put a recurring reminder in your calendar. Directors carry responsibility for how the business is run, and a compromised finance account is expensive — five minutes a quarter is cheap insurance. See the full security guide.
Related reading

Securing your Credit Corp business account: the full guide
The single place to lock down your Credit Corp business account — covering the password, two-factor…
Read →
Managing user roles and permissions
Roles let you give each colleague the right level of access: some can only view, some can transact, one is…
Read →
Managing trusted devices and active sessions
Your account keeps a list of the devices and browsers currently signed in. Reviewing it — and removing…
Read →
Turning on security alerts for your account
Security alerts email you the moment something sensitive changes — a new sign-in, a password reset, a change…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.