# Securing access to mautic
**URL:** https://forum.mautic.org/t/securing-access-to-mautic/3951
**Category:** General Discussion
**Created:** [May 23, 2016, 1:54pm UTC](https://forum.mautic.org/t/securing-access-to-mautic/3951 "2016-05-23T13:54:12Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@dirk\_s](https://forum.mautic.org/u/dirk_s)
#### Post date: [May 23, 2016, 1:54pm UTC](https://forum.mautic.org/t/securing-access-to-mautic/3951/1 "2016-05-23T13:54:12Z")
Given the fact, that Mautic usually will contain most sensitive data of a company - what good practices do you apply to secure the data and access to it?
E.g. is there something like a 2 factor authentication in the roadmap?
---
### Author:  [@dirk\_s](https://forum.mautic.org/u/dirk_s)
#### Post date: [May 23, 2016, 1:54pm UTC](https://forum.mautic.org/t/securing-access-to-mautic/3951/2 "2016-05-23T13:54:12Z")
Given the fact, that Mautic usually will contain most sensitive data of a company - what good practices do you apply to secure the data and access to it?
E.g. is there something like a 2 factor authentication in the roadmap?
---
### Author:  [@PLIDS](https://forum.mautic.org/u/PLIDS)
#### Post date: [May 24, 2016, 8:51pm UTC](https://forum.mautic.org/t/securing-access-to-mautic/3951/3 "2016-05-24T20:51:13Z")
Not sure if two factor authentication does help - usually even your sys admin does not use it, but has just a (hopefully strong) pwd for root user, so even if Mautic would have a two factor authentication the machine it is running on and probably also the backup will just be pwd secured … Instead, I would recommend to use the already available user and roles feature in Mautic as much as possible. In addition, create a document where you explain the logic you have chosen and you are save if someone asks you about the legal requirements.