Skip to content

Keepit Cloud Data Protection for all SaaS Apps

What is intelligent SaaS data protection?

Built for resilience, Keepit’s independent data centers provide unmatched SaaS data protection with no-transfer guarantees, ensuring your data remains secure, irreversible, and readily restorable. Keepit’s foundational Merkle tree architecture enables immutable memory to safeguard your data as your organization explores efficiency tools, such as AI, by protecting data across critical SaaS applications. With Keepit you have peace of mind.

Why choose Keepit

Future-proofing to ensure control

Unparalleled architecture

Keepit’s platform combines broad workload support, agility, and security, enabling data control and protecting critical applications throughout every stage of AI adoption..

Business continuity, always

Vendor-independent SaaS data protection

Keepit’s independent cloud follows 3-2-1 and NIST principles, separating backups from SaaS vendors to ensure uninterrupted access and resilient protection.

Effortless recovery, every time

Intuitive interface and easy access

Keepit enables fast, intuitive data recovery, letting users locate, preview, and restore files easily, while API-only architecture ensures seamless system integration.

Compliance made simple

Streamlined regulatory support

Keepit simplifies SaaS compliance with GDPR, NIS2, and NIST alignment, supporting retention, continuity, audit readiness, and critical data protection across applications.

Unlimited storage data

Per-seat, transparent cost model

Keepit offers transparent per-user pricing with unlimited storage, data transfer, and retention, plus scalable discounts, predictable costs, ROI, and SaaS license savings.

Certified for total confidence

Industry-leading security

Keepit delivers ISO 27001 and ISAE 3402-II certified security, with immutable, ransomware-resilient cloud protection ensuring data remains secure, trusted, and accessible.

Awards and Recognitions

Protecting Organizations Data Around the World

Keepit SaaS Data Management

Experience the benefits and security of intelligent SaaS data protection

Governing Agentic Identity: Why Security Must Assume Misbehavior

Governing Agentic Identity: Why Security Must “Assume Misbehavior”

During my tenure directing a Security Operations Center for a highly autonomous, fast-moving engineering firm, I eventually surrendered the illusion of maintaining a perfect asset inventory. Tracking “what’s out there” was an exercise in futility; shadow IT was powered by tribal knowledge, and new services were routinely spun up over holiday weekends without a word to security. Recognizing this, I pivoted to asking two far more practical questions:

  • What is the blast radius? (What systems and data can this asset actually touch?)
  • Where is the kill switch? (How rapidly can I sever its access if it goes rogue?)

This wasn’t born from a grand security philosophy, but from the pragmatic reality of defending an environment where absolute control is a luxury you simply don’t have.

I reflect on this because the industry is currently grappling with a similar existential crisis regarding Artificial Intelligence. With AI lowering the barrier to entry for attackers and accelerating the threat landscape, security leaders are constantly asking how to defend against unpredictable, machine-speed threats. The honest answer? You stop trying to predict them. Instead, you architect your defenses for a world where your threat forecasts will inevitably be wrong.

The Inventory Crisis, Amplified by AI Agents

Today, almost every enterprise falls somewhere on a spectrum between aggressively deploying AI agents and secretly having AI agents deployed by employees without IT’s knowledge. Many organizations have embraced a high risk tolerance, deciding that the productivity gains of giving autonomous agents broad, standing access are worth the potential security trade-offs. I am not here to condemn that choice—I have defended environments built on exactly that premise.

However, we must recognize the fundamental difference between human recklessness and machine autonomy. Humans experience fatigue, they second-guess their decisions, and they fear losing their jobs. AI agents possess none of these natural friction points. They execute tasks at the speed and scale they were programmed for, utilizing whatever access they have been granted, entirely devoid of hesitation.

If a rogue human engineer is a five-alarm fire, a rogue AI agent with identical privileges is that same fire—only this time, no fire department is coming, because security monitoring is historically calibrated to watch human behaviors, not autonomous processes.

A New Paradigm: Assume Misbehavior

For years, “assume breach” has been the gold standard of cybersecurity postures. In the era of agentic AI, we must evolve this concept further: assume misbehavior.

This doesn’t necessarily mean the AI has malicious intent. It simply means the agent is executing its exact instructions, but applying them in an unforeseen context that results in unauthorized data access or system manipulation. At enterprise scale, this isn’t a rare anomaly; it is an inevitable operational reality.

So, how do we establish governance over this chaos? It requires a structural shift in how we manage non-human identities:

  • Strict, Just-in-Time Scoping: An AI agent should never possess broad, standing access “just in case” it needs it later. It must be granted the exact permissions required for its current task, and nothing more. While this dynamic scoping is operationally heavier than granting permanent broad access, it is non-negotiable for minimizing risk.
  • Instant Revocability: Every agentic identity must be engineered with the assumption that you will need to terminate it instantaneously. If revoking an agent’s access requires submitting an IT ticket, scheduling a meeting, or waiting for approvals, you do not possess a security control; you have an administrative bottleneck.
  • Authentic Zero Trust: We must move past the marketing buzzword and implement true Zero Trust. This means continuously verifying an agentic identity and its specific requests at every transaction, rather than trusting it indefinitely simply because it passed an initial provisioning check.

This philosophy aligns with the frameworks being advanced by organizations like CoSAI (Coalition for Secure AI). We must stop treating AI agents like neglected service accounts and start treating them as first-class identities within our IAM infrastructure—identities that are continuously audited, strictly governed, and instantly revocable.

Enablement with a Leash

The solution to the proliferation of AI agents is not to become the “Department of No.” Blanket bans are rarely a successful strategy for a CISO looking to retain a seat at the executive table. The modern mandate is to enable the business while keeping it on a tight operational leash.

Allow the business to innovate and move quickly, but architect the underlying access model so that when an agent inevitably misbehaves, the blast radius is microscopic and containment is immediate.

I will concede that this strategy has an expiration date. “Enablement with a leash” works right up until AI agents operate at a level of autonomy and speed that completely outpaces human intervention. Nobody truly knows exactly where that tipping point lies. But I would much rather build the organizational muscle now—enforcing scoping, rapid revocation, and rigorous zero trust—while our current controls still function, rather than waiting for an AI-driven disaster to prove our defenses obsolete.

We cannot predict or fully govern the capabilities of the technology that is coming. We can only control what that technology is permitted to touch, and how rapidly we can sever its access when it behaves unexpectedly. In an era defined by profound unpredictability, establishing that baseline of control is everything.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

The Ultimate Guide to Hyperconverged Infrastructure (HCI)

What Is Hyperconverged Infrastructure (HCI)? A Comprehensive Guide

Hyperconverged infrastructure (HCI) is a transformative IT framework that merges compute, storage, and networking into a cohesive, single-system solution. By replacing the fragmented architecture of traditional data centers—where servers, switches, and storage arrays operate in silos—HCI dramatically simplifies IT operations. For administrators managing multiple branch locations or operating with lean IT teams, this consolidation translates to fewer hardware components to maintain, a single vendor for support, and significantly reduced points of failure. This guide explores the mechanics of HCI, cluster components, key business benefits, and critical criteria for evaluating HCI vendors.

Gartner defines HCI as a software-centric, scale-out architecture that integrates compute, storage, and networking on standard hardware under a single management umbrella. Ultimately, it allows IT departments to deploy, manage, and support one unified system instead of juggling three disparate technology stacks.

Virtualization: The Foundation of Convergence

To appreciate the value of HCI, it helps to understand the historical context and the specific challenges it was designed to resolve.

Before the advent of HCI, virtualized environments heavily relied on the standard “3-2-1 architecture”: virtual machines (VMs) hosted on three (or more) clustered servers, networked via two switches, and tethered to a shared storage appliance like a SAN or NAS.

When virtualization first emerged, physical servers were the undeniable standard. As a software overlay, virtualization had to utilize the existing, siloed hardware components. IT professionals painstakingly stitched these disparate pieces together to form clusters. However, this underlying hardware was rarely optimized for virtualization, and managing a mix of vendors and proprietary management consoles was notoriously complex.

This patchwork methodology birthed the 3-2-1 model. While functional, its inherent complexity multiplies exponentially with every hardware refresh or new site deployment.

The Evolution: Converged Infrastructure

Converged infrastructure represented the first major effort to untangle the 3-2-1 model, paving the way for modern HCI.

Manufacturers began bundling compute and storage layers into a single, pre-tested solution sold under a single SKU. This eliminated the compatibility nightmares associated with multi-vendor environments and accelerated deployment timelines.

Eventually, vendors merged compute and storage directly into single appliances. Adding processing power to storage arrays to run VMs was technically feasible, and many products adopted this model.

However, an architectural bottleneck remained. Most converged systems still relied on Virtual Storage Appliances (VSAs)—essentially storage controllers operating as VMs—to manage data routing. This merely shrank the physical footprint of the old 3-2-1 model without resolving its underlying software complexity.

Defining Modern Hyperconverged Infrastructure (HCI)

HCI elevates convergence by natively embedding the virtualization hypervisor directly into the architecture, rather than bolting it on as an afterthought. This deep integration is what transforms a bundle of hardware into a truly unified system.

In an HCI cluster, specialized software on every node distributes compute, storage, and virtualization tasks seamlessly across the entire network. Consequently, as you scale the cluster by adding nodes, performance and resilience simultaneously increase. Because workloads are distributed rather than siloed on specific servers, a well-configured cluster can suffer a total node failure without interrupting the applications it hosts. To guarantee this redundancy, production environments typically deploy a minimum of three nodes.

The Core Components of an HCI System

An HCI solution seamlessly amalgamates four distinct layers that previously required dedicated hardware:

  • Hypervisor: The virtualization engine responsible for creating and running VMs on each node. While many HCI platforms require you to purchase and manage a third-party hypervisor license, solutions like SC//HyperCore™ include a native, embedded KVM-based hypervisor, eliminating extra licensing and patching overhead.
  • Clustered Storage: This layer pools the local storage drives of every node into a single, software-managed shared resource, rendering traditional SAN or NAS appliances obsolete. (e.g., SC//HyperCore utilizes SCRIBE technology to distribute data and ensure availability during hardware failures.)
  • Compute Nodes: These are the physical servers providing CPU, RAM, and local storage to the cluster. Because the hypervisor and storage software run directly on each node, adding a new node instantly scales processing power and storage capacity simultaneously.
  • Centralized Management: The unified interface used to provision, monitor, and maintain the entire cluster. This transforms a collection of physical servers into a single, easily administered ecosystem.

Understanding Hyperconverged Storage

Hyperconverged storage is the software-defined engine within HCI that eliminates the need for SAN and NAS arrays. For IT teams, this represents a massive operational upgrade.

Instead of wrestling with dedicated storage controllers, complex cabling, and separate licensing, hyperconverged storage aggregates the internal disks of every node into one unified pool. Data and workloads are automatically distributed and protected across the cluster. There are no standalone storage appliances to size, maintain, or replace. In the SC//HyperCore environment, SCRIBE handles this automatically, ensuring peak performance and data resilience.

The Business Benefits of HCI

Consolidating your infrastructure transforms not just your server racks, but how your IT staff allocates their time. Common benefits include:

  • Streamlined Management: Operating with a single vendor, a single support contact, and one unified interface slashes the administrative burden of juggling multiple systems.
  • Reduced Total Cost of Ownership (TCO): Eliminating standalone storage arrays and VSAs lowers capital expenditures, while reducing the hours IT spends patching and troubleshooting drives down operational costs.
  • Predictable Scaling: Need more capacity? Simply add a node. There is no need to re-architect the environment, making budget forecasting highly predictable.
  • Native High Availability: Workloads are inherently distributed. If a node fails, applications remain online, drastically reducing the need for manual failover configurations.
  • Minimized Footprint: Condensing servers, storage, and networking into fewer boxes saves critical rack space and reduces power/cooling consumption—vital for edge and remote deployments.
  • Streamlined Backup and DR: With data natively distributed and protected, integrated snapshot and replication features reduce reliance on complex third-party backup and disaster recovery tools.

The Power of Self-Healing Infrastructure

Self-healing infrastructure goes beyond mere high availability; it proactively detects, diagnoses, and resolves issues—often before IT is even aware a problem occurred.

For example, the Autonomous Infrastructure Management Engine (AIME) within the SC//HyperCore platform continuously monitors cluster health. It can automatically remediate issues like failing drives or degraded nodes without human intervention. VMs are highly available by default, automatically restarting on healthy nodes during a failure without requiring pre-configured failover rules. For distributed environments lacking on-site IT staff, this shifts infrastructure management from reactive firefighting to autonomous operation.

HCI vs. Traditional Infrastructure: A Comparison

When planning an infrastructure refresh, the choice between traditional 3-2-1 setups and HCI typically centers on scalability, management overhead, and fault tolerance.

Feature/DimensionTraditional Infrastructure (3-2-1)Hyperconverged Infrastructure (HCI)
Hardware ArchitectureSeparate layers (compute, storage, networking) from multiple vendors.Fully integrated, single-system solution.
Management InterfaceMultiple proprietary consoles and various support contacts.One centralized interface and a single vendor.
ScalabilityRequires expensive “forklift upgrades” or new storage arrays.Scales linearly and incrementally by adding nodes.
High AvailabilityRequires complex, manual failover configurations.Built-in by default across the entire cluster.
Deployment SpeedTakes weeks to integrate, configure, and test.Takes hours to days for a pre-integrated cluster.
Total Cost of OwnershipHigher (multiple licenses, complex support contracts).Lower (consolidation, reduced management overhead).
Ideal Use CaseLarge, centralized data centers with dedicated IT specialists.Distributed sites, edge computing, and lean IT environments.

Evaluating HCI Vendors: Crucial Questions to Ask

Not all HCI platforms are created equal, and the nuances often become painfully apparent during daily operations rather than on a spec sheet. Ask these questions before committing:

  • Is the hypervisor native or an add-on? Confirm if the hypervisor is truly built-in, or if you will be forced to buy and manage a separate third-party license.
  • What is the storage architecture? Does storage run natively within the hypervisor, or does it rely on resource-heavy Virtual Storage Appliances (VSAs) that complicate troubleshooting?
  • Is the hardware flexible? Can you mix node models and generations within the same cluster? Rigid hardware rules make future scaling unnecessarily expensive.
  • Who owns the support? Does one vendor handle support from end-to-end, or will you be bounced between software and hardware vendors during a crisis?
  • How are Day-2 operations handled? Evaluate the reality of remote patching, monitoring, and node replacement. Platforms managed via central orchestration (like SC//Fleet Manager™) allow lean teams to update hundreds of sites remotely.

Conclusion

Hyperconverged infrastructure revolutionizes the legacy 3-2-1 model by fusing compute, storage, and networking into a unified, easily managed system featuring built-in high availability, node-by-node scaling, and autonomous self-healing capabilities.

However, it is imperative to verify that an HCI vendor truly delivers on this promise. Ensure the hypervisor is genuinely native, that storage doesn’t rely on clunky VSAs, and that resilience is an inherent feature rather than an afterthought configuration.

Ready to see how true HCI operates in the real world?

Speak with a Scale Computing™ expert to discuss sizing, migration planning, and deployment strategies tailored to your environment.

About Scale Computing
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

The Hidden Dangers of Internet-Connected Cameras

The Hidden Dangers of Internet-Connected Cameras: From Public Streets to Military Supply Chains

A disturbing reality has recently come to light, underscoring how common technology can be weaponized in modern warfare. According to a joint cybersecurity advisory from the Netherlands General Intelligence and Security Service (AIVD) and the Defence Intelligence and Security Service (MIVD), Russian state-sponsored hackers are actively compromising internet-connected IP cameras. Their objective? To conduct systemic digital espionage against Ukraine, NATO, and various EU member states. The practice of hacking surveillance equipment for international espionage is not entirely new, but the latest intelligence reveals that Russia is specifically leveraging these feeds to monitor NATO troop deployments and supply logistics. While we expect adversarial nations to continuously develop novel combat tactics, the ease with which IP cameras are repeatedly exploited remains a glaring security failure.

The Threat Within Civilian Infrastructure

What makes this situation particularly unsettling is the ownership of the compromised devices. Hackers are not breaking into highly classified military cameras; they are infiltrating civilian infrastructure. The data sources fueling these intelligence operations are ordinary security cameras mounted on storefronts, residential homes, and city street corners. For organizations, this highlights a massive blind spot. Many businesses lack comprehensive visibility into their own surveillance networks and the security protocols—or lack thereof—governing them. An unsecured IP camera acts as a double-edged sword: it offers adversaries a literal window into sensitive logistical operations and serves as a highly effective beachhead for launching broader network intrusions.

Understanding the Scope of the Vulnerability

The sheer volume of at-risk devices is daunting. Security firm Censys recently identified roughly 87,000 internet-facing cameras across the EU (including over 4,000 in Ukraine) that are running services tied to known, exploitable vulnerabilities. While the presence of a CVE (Common Vulnerabilities and Exposures) does not guarantee a device is actively being hacked, sophisticated exploits are rarely necessary. Cybercriminals frequently bypass complex hacking methods by simply logging in using default, factory-set credentials, which offer quiet, hard-to-detect network access. Another critical issue omitted from the European advisory involves the hardware supply chain. Certain major IP camera manufacturers have been outright banned by the U.S. government due to espionage concerns and ties to the Chinese state. However, private businesses and citizens across the U.S. and allied nations continue to purchase and deploy these exact brands in massive numbers. When you combine this risky hardware with universally vulnerable protocols like UPnP (Universal Plug and Play), it becomes clear that western nations are currently a goldmine for cyber threat actors.

Closing the Vulnerability Gap: Defense Strategies and runZero

While the exploitation of IP cameras is unlikely to cease, the Dutch intelligence advisory provides actionable, straightforward guidelines to secure these devices. To protect your network, you should:
  • Audit Internet Exposure: Identify which cameras are accessible from the internet, whether directly or via firewalls, proxies, or vendor clouds.
  • Lock Down Access: Disable public internet streaming, UPnP, and port forwarding. Route all camera access securely through a VPN.
  • Enhance Authentication: Immediately change all default passwords and enforce Multi-Factor Authentication (MFA) wherever supported.
  • Adjust Physical Placement: If possible, aim cameras away from highly sensitive areas like loading docks, logistical hubs, and supply routes.
  • Maintain Software: Purchase hardware with long-term support and apply firmware patches religiously.

How runZero Can Secure Your Environment

Managing the security risks of IP cameras requires total network awareness. Here is how runZero helps you regain control:
  • Complete Asset Discovery: You cannot protect what you cannot see. runZero meticulously maps your entire network, identifying every IP camera and determining whether it is dangerously exposed to the public internet.
  • UPnP Detection: Because UPnP is frequently abused for lateral movement, runZero identifies this protocol across your entire network environment so you can disable it and shut down entry points.
  • Network Segmentation Validation: IoT devices frequently end up on the wrong networks. runZero provides deep visibility into your network architecture, helping you spot misplaced devices, multi-homed hardware, and broken segmentation before hackers do.
In an era where AI-driven cyber attacks are becoming the norm, hoping your IP cameras are secure is no longer an option. Contact us today or sign up for a free trial to ensure your attack surface is fully protected.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Evaluating Microsoft Entra’s Native Backup

Evaluating Microsoft Entra’s Native Backup: Is It Sufficient for Your Enterprise?

Microsoft has finally delivered a highly anticipated feature: the General Availability of Microsoft Entra Backup and Recovery. Automatically included for tenants equipped with Entra ID P1 or P2 licenses, this new utility acknowledges the critical need for robust, customer-led identity data protection. But is this free, built-in tool enough to secure your entire identity estate?

The Advantages of the Native Entra Solution

For resolving immediate, accidental errors—such as an administrator mistakenly altering a Conditional Access policy earlier in the week—the native tool provides a solid baseline of protection. Its core benefits include:

  • Automated Daily Snapshots: Captures vital directory objects, including users, groups, and Conditional Access policies.
  • Immutable Storage: Prevents rogue administrators or threat actors from switching off or deleting backup points.
  • Difference Reporting: Allows administrators to review exact changes between the backup and the live tenant before committing to a restore.
  • Cost-Effective: Currently included at no extra charge for premium license holders.

Native vs. Third-Party: Four Critical Limitations

While the native utility is a fantastic starting point for short-term rollbacks, organizations must ask themselves four vital questions before adopting it as their sole safety net. A comparison with dedicated third-party platforms, such as Keepit, highlights significant operational gaps:

Risk FactorMicrosoft Entra Native BackupDedicated Platforms (e.g., Keepit)
Detection WindowLimited to a 7-day retention period, failing to cover prolonged or stealthy breaches.Offers customizable data retention for up to 99 years.
Infrastructure IndependenceHosted on Microsoft’s own cloud, violating the rule of separating production and backup data.Stored on an independent, vendor-neutral cloud infrastructure.
Restore FlexibilitySupports in-place restoration only, limiting disaster recovery testing.Allows cross-tenant restores for DR sandboxing and secure verification.
Coverage ScopeRestricted to core Entra objects and policies.Covers Intune profiles, BitLocker keys, M365, and other SaaS applications under one console.

Building a Resilient Recovery Strategy

Microsoft correctly positions its native tool as just one component of a broader tenant recoverability strategy. However, true disaster recovery requires the separation of duties, extended retention capabilities, and cross-platform management. Relying solely on the native tool leaves your organization exposed to systemic vendor outages and long-term intrusions.

If you are already leveraging an independent backup solution, your current strategy remains sound. If you are exclusively relying on Entra’s native capabilities, it is time to reassess your operational readiness.

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Navigating Data Privacy Compliance in Retail with Google Workspace

How Retailers Can Master Data Privacy Compliance Using Google Workspace

The Core Challenge: Retailers handle massive volumes of sensitive data. However, the real compliance hurdle isn’t just the sheer amount of data—it’s the chaotic operational environment. High turnover, seasonal hiring, and shared devices create security gaps that platforms like Google Workspace cannot automatically seal on their own.
Modern retail is fundamentally data-driven. A typical mid-sized operation processes thousands of daily transactions, manages vast loyalty programs, and executes regional email marketing campaigns. Every single point of contact with customer data brings strict regulatory obligations. To successfully navigate data privacy in retail, IT teams must first understand where risks hide within a typical Google Workspace setup. By recognizing the practical fallout of unmanaged gaps, organizations can transition from reactive troubleshooting to proactive, policy-driven governance.

The Retail Compliance Battlefield

For retailers operating in the UK and EU, the General Data Protection Regulation (GDPR) dictates the rules, wielding potential fines of up to €20 million or 4% of global annual turnover. In 2023 alone, the Information Commissioner’s Office (ICO) levied over £10 million in penalties, frequently citing failures in data access controls and inadequate data retention. Furthermore, merchants accepting card payments must comply with PCI-DSS, which demands rigorous access management around cardholder data. The primary issue for retail IT directors isn’t ignorance of these laws; it’s the difficulty of executing them at scale. When IT and compliance teams are stretched thin by rapid hiring cycles, new store launches, and holiday rushes, manual compliance processes inevitably break down. Google Workspace is a popular choice for retail IT to manage users, communications, and files. Building a defensible security posture requires a clear understanding of both what the platform can do natively—and where it falls short.

Where Google Workspace Shines Natively

When configured correctly, Google Workspace offers a robust technical baseline for compliance. Key native features include:
  • Encryption: Data is encrypted both in transit and at rest across Gmail, Drive, and other services, protecting customer records and internal HR files.
  • Data Loss Prevention (DLP): Configurable rules can detect and prevent the unauthorized outbound sharing of sensitive information, like customer lists or payment details.
  • Multi-Factor Authentication (MFA): Enforcing MFA significantly reduces the risk of compromised credentials—a critical safeguard in high-turnover sectors where maintaining account hygiene is challenging.
While crucial, these features primarily address the platform’s security layer. They do not govern the messy, day-to-day operational processes that dictate whether compliance is actually maintained. This operational disconnect is where most retail compliance failures take root.

Operational Blind Spots in Retail Workspace Environments

Unlike a static corporate office, a retail environment is highly fluid. The following scenarios highlight real-world compliance risks that Google Workspace’s native tools cannot reliably prevent without additional help.

1. The Seasonal Surge and Sloppy Offboarding

Consider a national chain hiring 300 temporary workers for the holiday season, creating 300 new Workspace accounts. Come January, every single account must be suspended, access revoked, and data transferred or deleted according to retention policies. If even 10% of these offboarding tasks are delayed because they rely on a store manager manually raising an IT ticket, 30 former employees still have live access to customer data. Under GDPR Article 5, this is a clear data minimization failure.

2. The Shared Device Dilemma

Shop floor staff frequently access Google Workspace via shared tablets or point-of-sale systems. When shifts change or a device is handed off, tracking exactly whose credentials are active—and what data they can view—becomes a major compliance headache. Without automated session management and strict role-based permissions, shared devices represent a persistent vulnerability in access control.

3. Scope Creep and Stale Permissions

Retail hierarchies involve regional managers, store managers, and team leads, each requiring specific access levels to HR, scheduling, and customer data. Without regular audits, access permissions inevitably drift. A promoted store manager might retain access to a regional HR folder, or a team lead might still have customer data from an old marketing campaign. GDPR demands that access be limited to what is strictly necessary; manual permission reviews rarely keep up with reality.

4. Hoarding Customer Data

Customer emails from a past holiday campaign, loyalty data from a shuttered location, or old transaction records create massive liability if left lingering in Google Drive or Gmail archives. Without automated data retention and deletion policies, this information silently accumulates, inflating compliance risk and expanding the blast radius of any potential data breach.

The Shift to Automated Governance

The common denominator in these retail risks is the reliance on manual processes. Checklists, ticketing systems, and periodic manual audits simply do not scale to the speed and complexity of retail operations. Human error isn’t an anomaly here; it’s a guaranteed result of asking an overloaded IT team to manually police a highly dynamic workforce. Retail IT teams require policy-driven automation that enforces compliance controls consistently, 365 days a year. Practically, this looks like:
  • Zero-Touch Offboarding: Workflows that trigger instantly when a contract ends, automatically revoking access, suspending the account, and transferring data ownership without requiring IT to lift a finger.
  • Automated Data Retention: “Set-and-forget” policies that automatically delete archived data after a predefined period, ensuring GDPR compliance without manual reviews.
  • Granular Backup and Recovery: Solutions that extend beyond Google’s native capabilities, allowing IT to rapidly restore individual files, user accounts, or specific datasets following an accidental deletion or security incident.

Close the Compliance Gap with CloudM

CloudM is specifically engineered to solve the complex data privacy challenges inherent to retail businesses by replacing manual interventions with automated governance policies. For retail IT, CloudM provides onboarding and offboarding workflows featuring over 30 configurable, automated steps—including instant access revocation and data transfer. CloudM’s Smart Teams feature allows IT to dynamically group users by store location, department, or seniority level, far exceeding Google’s standard Organizational Units. This ensures permissions and policies are applied consistently across complex, multi-site operations. Furthermore, backup policies are automatically assigned to new users from day one. For Data Protection Officers (DPOs) and compliance managers, CloudM delivers the essential “set-and-forget” archiving and retention tools required by modern regulations. Data is held for the requisite period and then automatically purged. Comprehensive audit trails are maintained, streamlining regulatory reporting and subject access requests. Crucially, CloudM empowers retailers to host backups on their own infrastructure, rather than routing data through third-party servers, ensuring the data sovereignty increasingly mandated by privacy laws. If your retail organization is still relying on manual processes to manage Google Workspace compliance, a breach or violation is merely a matter of time. Discover how CloudM can build a resilient compliance posture that withstands the pressures of retail operations. Get started with CloudM today.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About CloudM
CloudM is an award-winning SaaS company whose humble beginnings in Manchester have grown into a global business in just a few short years.

Our team of tech-driven innovators have designed a SaaS data management platform for you to get the most from your digital workspace. Whether it’s Microsoft 365, Google Workspace or other SaaS applications, CloudM drives your business through a simple, easy-to-use interface, helping you to work smarter, not harder.

By automating time-consuming tasks like IT admin, onboarding & offboarding, archiving and migrations, the CloudM platform takes care of the day-to-day, allowing you to focus on the big picture.

With over 35,000 customers including the likes of Spotify, Netflix and Uber, our all-in-one platform is putting office life on auto-pilot, saving you time, stress and money.

Rethinking Zero Trust: The Case for AI Birth Certificates

Rethinking Zero Trust: Why AI Agents Require a “Digital Birth Certificate”

The Bottom Line: The traditional zero-trust model is cracking under the weight of autonomous AI. As organizations grant sweeping permissions to AI agents, the US Intelligence Community warns that we must establish a foundational identity system—a “digital birth certificate”—to govern these non-human entities before they become massive security blind spots.

For decades, the zero-trust security paradigm has been anchored by a simple rule: verify every user and device, and enforce the principle of least privilege. This framework is highly effective when managing human logins or standard corporate endpoints. However, it quickly deteriorates when introduced to agentic AI—autonomous programs designed to operate independently, at machine speed, across a web of interconnected systems simultaneously.

This escalating friction was recently thrust into the spotlight. At the Defense Intelligence Agency’s DoDIIS conference, Douglas Cossa, CIO of the Intelligence Community, openly addressed the elephant in the room. As reported by Breaking Defense, Cossa admitted that agentic AI has “completely spun zero trust on its head.” Rather than defaulting to restricted access, enterprises are outfitting AI agents with broad capabilities to fulfill their autonomous tasks. To bridge these two conflicting security postures, Cossa proposed a definitive solution: a unified identity framework.

His proposed fix is as memorable as it is necessary: a digital birth certificate. This concept must extend beyond human users and hardware to encompass every AI agent capable of requesting, storing, or manipulating data.

A Structural Enterprise Crisis, Not Just a Government Problem

It would be a critical mistake for private enterprises to dismiss this as merely an isolated public-sector dilemma. Cossa’s observations highlight a structural vulnerability that every corporate security team is currently facing.

Traditional zero-trust architectures were engineered for static populations—employees, contractors, servers, and laptops. These entities undergo predictable lifecycles of provisioning, auditing, and offboarding. AI agents, conversely, defy these rules. They are generated dynamically (sometimes autonomously by other agents) to execute hyper-specific tasks, and then they vanish. There is no standard HR onboarding process for a bot spun up via a developer’s script an hour ago, leaving it entirely absent from conventional active directories.

This is the exact vulnerability Cossa is highlighting. If an organization cannot clearly define what an agent is, who deployed it, and what its operational boundaries are, traditional defenses like network segmentation become obsolete. The agent remains a ghost, effectively invisible to the governance systems designed to police it.

Identity Must Precede Access Control

Security teams frequently attempt to solve the access problem first by simply trying to restrict what a bot can do. However, assigning permissions is futile without a persistent, verifiable identity to anchor them to. You cannot effectively enforce least privilege on an entity you cannot consistently recognize.

This is precisely why Cossa framed the solution as an identity system rather than a standard access-control policy. An AI agent’s “birth certificate” must establish several core attributes before any access is granted:

  • Origin: Who or what system created the agent?
  • Authorization Scope: What specific tasks and systems is it permitted to interact with?
  • Time-to-Live (TTL): How long is this agent authorized to exist before it expires?
  • Accountability: How can its actions be definitively traced back to a human operator or system of record?

The broader cybersecurity market is already voting with its wallet on this issue. Non-Human Identity (NHI) management has surged as one of the fastest-growing sectors for venture funding and acquisitions. Billion-dollar deals underscore how urgently the private sector is scrambling to secure machine and agent identities. Government framing and market spending are rapidly converging on the exact same conclusion.

The Necessity of Real-Time Enforcement

Establishing an identity is only half the battle. An AI’s birth certificate is useless unless systems can continuously verify it the exact moment the agent attempts to interact with a network, endpoint, or dataset. Issuing an identity and enforcing its boundaries are two very different operational challenges.

This is where network-based access controls must seamlessly integrate with Identity and Access Management (IAM) and Privileged Access Management (PAM) platforms. While IAM and PAM define the entity and its entitlements, the actual enforcement—the split-second decision to permit or deny access—must occur continuously at the network layer. Agentic AI operates far too rapidly to be governed by static, quarterly access reviews.

The Road Ahead

Ultimately, every AI agent is an identity, demanding the exact same rigorous governance historically applied to humans and hardware. The US Intelligence Community’s stance confirms that securing non-human identities is no longer a theoretical exercise—it is a mandatory evolution of the zero-trust model.

The defining question is no longer whether AI agents need identities, but how rapidly organizations can deploy the infrastructure needed to issue, verify, and enforce them before these invisible gaps are actively exploited by threat actors.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Shadow AI Detection Strategies

Mastering Shadow AI Detection: Essential Strategies

Executive Summary: Identifying “Shadow AI” requires moving beyond simple blocklists. Effective detection hinges on scrutinizing anomalous accounts, credential usage, code commits, access patterns, and hidden SaaS integrations.

As the adoption of artificial intelligence explodes within the modern workplace, detecting Shadow AI has become a critical mandate for security teams. Employees are increasingly weaving AI tools into their daily routines. However, when corporate-approved options fall short, workers frequently turn to unsanctioned, external platforms.

The numbers highlight the urgency: A recent IBM-backed study revealed that 80% of American office workers utilize AI in their jobs, yet a mere 22% stick exclusively to company-sanctioned tools. This trend is starkest among Gen Z professionals, where 35% prefer utilizing only personal AI tools, significantly outpacing the 14% average across other age brackets. These statistics underscore the rapid proliferation of shadow AI and the critical need for robust detection mechanisms.

Defining Shadow AI

Much like its predecessor, Shadow IT (the unauthorized use of SaaS apps and hardware), Shadow AI refers to the deployment of artificial intelligence technologies without the IT department’s explicit approval or oversight. When employees find corporate AI offerings to be inadequate, restrictive, or simply non-existent, they instinctively seek out personal or unvetted AI services to bridge the gap.

The Mechanics of Shadow AI: How It Spreads

AI delivers undeniable productivity boosts, driving rapid, grassroots adoption. The same IBM survey noted that 75% of US office workers experience moderate to substantial productivity gains using AI, with nearly a third saving up to six hours a week.

Consequently, shadow AI usually takes root in mundane, everyday tasks. One worker might use a personal ChatGPT account to draft emails; another might feed sensitive financial data into Claude for rapid summarization. Because these tools are highly accessible, often free, and increasingly baked directly into web browsers and existing software, they proliferate effortlessly.

The critical danger lies in the bypass of standard procurement, security, and compliance vetting, instantly creating massive visibility blind spots for the enterprise.

Secure Your Browsing Environment

Stop browser-based threats at the source. Your first line of defense begins with the Enterprise Browser.

Discover More

Real-World Scenarios: Shadow AI in the Office

Shadow AI often masquerades as harmless efficiency. Here are common examples you are likely encountering right now:

  • The Sales Pitch: A sales manager inputs pricing tiers, discount margins, and historical client notes into a personal AI account to polish a proposal. The company loses all visibility over where this proprietary data is stored or how the AI model uses it.
  • HR Feedback: An HR professional uses a public chatbot to summarize candidate interviews, feeding it real names and internal assessments. The data circumvents all approved internal HR systems.
  • Financial Summaries: A finance team member pastes raw, unreleased quarterly figures into an AI tool to generate executive commentary, exposing highly confidential data to an ungoverned external channel.
  • Rogue Development: Developers integrate a generative AI API into an internal support tool to automate responses. Because it requires no heavy infrastructure changes, it bypasses formal security reviews.
  • SaaS Feature Toggles: A marketing team flips a switch to enable an AI writing assistant within their project management software. Client names and project strategies are suddenly being processed by an unvetted third-party language model.

These actions are driven by a desire to be productive, which is precisely why shadow AI is so insidious: it feels benign to the user while silently generating severe governance, visibility, and data security crises.

The Detection Challenge: Why is it so hard?

Detecting unauthorized AI is notoriously difficult because the activity perfectly mimics legitimate daily work. As AI becomes natively embedded into SaaS platforms, APIs, and browser extensions, what looks like a standard API call or app interaction might actually be an unauthorized AI model processing corporate data in the background.

Traditional security tools fall short here. Legacy Data Loss Prevention (DLP) solutions are excellent at catching bulk file transfers or massive database downloads. However, they struggle to detect a user pasting a few lines of proprietary source code or a confidential financial summary into a chatbot prompt. The volume of data is too small to trigger conventional DLP thresholds, but the risk remains catastrophic.

Static rules and simple “allow/block” lists lack the necessary contextual and behavioral intelligence. To combat deeply woven AI usage, organizations require dynamic, behavioral-based detection strategies that monitor activity across users, infrastructure, and integrated services.

The Cascading Risks of Shadow AI

Failing to detect shadow AI introduces severe, multifaceted risks to the organization:

  • Data Leakage: Employees inadvertently feed confidential IP into AI models, ignorant of how that data is stored, utilized for future model training, or shared.
  • Rogue Autonomous Actions: Shadow AI agents pose a unique threat. These agents often possess permissions to modify, send, or delete data across connected apps. An unvetted agent might autonomously forward sensitive documents or alter records without human oversight.
  • Regulatory Violations: Processing PII, financial, or healthcare data through unauthorized AI tools virtually guarantees violations of frameworks like GDPR or HIPAA, inviting massive fines.
  • Expanded Attack Surfaces: Unsanctioned tools bypass internal security standards, creating hidden vulnerabilities and backdoor pathways for threat actors.
  • Reputational & Financial Damage: A single data exposure incident caused by shadow AI can erode customer trust and result in direct financial losses.
  • Operational Unreliability: When teams rely on disparate, unvetted AI tools, the accuracy of their output varies wildly, leading to business decisions based on “hallucinated” or inaccurate data.

5 Strategies for Detecting Shadow AI

Effective detection requires looking beyond simple URL blocking. The true indicators of shadow AI lie within identity behaviors, integrations, and code environments.

1. Scrutinize Identity Patterns

Begin by auditing non-human identities. Security teams must investigate newly introduced identities, their inherited privileges, and whether they bypassed formal access reviews. Red flags include the sudden creation of service accounts, OAuth apps requesting excessive permissions, orphaned programmatic identities, or unusual spikes in API activity. Shadow AI is frequently unmasked by strange identity behavior rather than a visible application icon.

2. Map Credential and Secrets Activity

AI tools rely heavily on credentials to interface with APIs and models. Monitor for newly generated API keys, credentials hardcoded into CI/CD pipelines, long-lived tokens being recycled across different environments, or anomalous vault access tied to automation. Any AI workload running in your environment must have its supporting credentials clearly linked to a verified owner and a legitimate business purpose.

3. Audit Development Artifacts

Shadow AI often infiltrates an organization long before it hits production. It sneaks in through code repositories and developer workflows. By proactively inspecting build pipelines and packaged dependencies, security teams can spot external model SDKs, unapproved embedding libraries, or direct AI API integrations before they become entrenched in internal software.

4. Analyze Authorization Behavior

Do not just look for the existence of an AI identity; analyze its actions. Shadow AI frequently exhibits bizarre authorization patterns, such as rapid privilege escalation, automated identities altering directory controls, or complex chained actions across multiple systems (e.g., a workflow jumping from an IT ticketing system directly into a cloud API). These behavioral anomalies can expose hidden AI processes.

5. Audit SaaS and Third-Party Integrations

Shadow AI thrives within existing SaaS ecosystems. AI capabilities are frequently toggled on within trusted applications via delegated access. Organizations must continuously inventory third-party integrations, hunt for persistent offline access, and flag connections lacking clear ownership. Because these AI features piggyback on pre-approved SaaS permissions, they easily bypass traditional IT provisioning protocols.

About Nord Security
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Discord Password Management Guide

Mastering Your Discord Password: How to Change, Reset, and Secure It

Discord has evolved into the ultimate hub for gamers and online communities. Whether you’re streaming, utilizing VoIP, or hanging out in private servers, it is the premier platform for staying connected. However, this popularity makes Discord accounts a prime target for scammers and malicious bots eager to hijack user credentials. To maintain your account’s integrity, this guide covers everything you need to know about changing, resetting, and fortifying your Discord password, including transitioning to passwordless authentication.

Why Update Your Discord Password?

Generally, you’ll need to update your password for one of two reasons: a lapse in memory or a security breach. If you’ve simply forgotten your login, a quick reset via your associated email or phone number will get you back in.

Conversely, if your password has been compromised, immediate action is required. Changing your password forces a logout across all devices, instantly locking out unauthorized users. Furthermore, if you reuse that compromised password elsewhere, you must update it across those platforms immediately to prevent a domino effect of breached accounts.

Not sure if your data is safe? Tools like Password Health checkers can scan for exposed credentials, allowing you to proactively secure your accounts.

How to Change Your Discord Password

Updating your password is a simple process whether you are on a computer or a smartphone. You will find the necessary tools tucked away in the “Account” section of your settings.

On Desktop and Web Browser

  1. Launch the Discord application or navigate to discord.com/app.
  2. Locate the cogwheel icon (User Settings) in the bottom-left corner, next to your username.
  3. Under the “Password and security” heading, find the “Password” section and click “Edit.”
  4. Input your current password, followed by your new password (entered twice for confirmation).
  5. Click “Done.”

Note: You will be logged out everywhere and receive a confirmation email. If you receive this email but didn’t initiate a change, contact Discord Support immediately.

On the Mobile App

  1. Open the Discord app.
  2. Tap your profile avatar in the bottom-left corner.
  3. Tap “Settings” via the bottom-right navigation menu.
  4. Select “Account.”
  5. Under “How you sign in to your account,” tap “Password.”
  6. Type in your current password and your desired new password.
  7. Tap “Change password.”
Security Tip: Your new password should be at least 15 characters long, mixing uppercase, lowercase, numbers, and symbols. Using a password manager like NordPass makes generating and storing these complex passwords effortless.

What to Do If You Forget Your Password

Discord does not allow password retrieval. If you forget it, you must initiate a complete reset using your linked email or phone number.

Resetting via Desktop and Web

  1. Open the app or visit discord.com/login.
  2. Enter your email or phone number, then click “Forgot your password?”
  3. Check your email or SMS for a message from Discord.
  4. Click the “Reset your password here” link within the message.
  5. Create and confirm your new password.

Resetting via the Mobile App

  1. Open Discord.
  2. Enter your email address and tap “Forgot your password?”
  3. Open the recovery email and tap the reset link.
  4. Enter your new password.
  5. Tap “Change password.”

How to Find a Saved Password (Without Resetting)

Before initiating a reset, check if your browser or device saved your credentials during your initial login.

  • Google Chrome: Click the three-dot menu (top-right) > “Passwords and autofill” > “Google Password Manager” > Search for “Discord.”
  • Android: Go to Settings > “Google services” > “All services” > “Autofill with Google” > “Google Password Manager” > Search for “Discord.”
  • iOS: Go to Settings > “Apps” > “Passwords” > “Open passwords” > Authenticate > Search for “Discord.”

Level Up Your Security: Try Passkeys

Discord now supports passkeys—a passwordless authentication method utilizing your device’s biometrics (fingerprint/Face ID) or PIN. It’s faster and significantly more secure than traditional passwords.

While passkeys are found under the Multi-Factor Authentication (MFA) tab, they are distinct from traditional app-based MFA (which you can and should also enable).

Setting Up Passkeys on Mobile

  1. Go to Settings > Account.
  2. Tap “Get started” in the passkey suggestion box (or tap “Security keys” > “Add”).
  3. Choose how to generate the passkey (e.g., “Create a passkey with your password manager”).
  4. Verify your current password.
  5. Follow your device/password manager’s prompt to create the key.
  6. Name the security key and tap “Finish.”
  7. Crucial Step: Screenshot or save your backup codes in a secure location.

Setting Up Passkeys on Desktop/Web

  1. Go to User Settings (cogwheel icon).
  2. Under “Password and security,” click “Multi-factor authentication.”
  3. Select “Add security key.”
  4. Verify your password.
  5. Click “Let’s go” and follow your browser/password manager prompts to create and name the key.
  6. Click “Finish” and securely store your downloaded backup codes.

Troubleshooting: Missing Password Reset Emails

If the reset email isn’t arriving, try these steps:

  • Check Spam: Your filter might have flagged it.
  • Verify Spelling: A simple typo sends the email into the void.
  • Try Alternate Emails: You might have registered with a different address.
  • Use SMS: Request a reset via your linked phone number instead.
  • Check for Account Hijacking: Search your inbox for “Discord email address changed.” If someone altered your account details, contact Discord Support immediately.
Beware of Phishing: Always verify the timestamp of a reset email. If it doesn’t match the exact moment you requested it, it’s likely a scam.

The Discord Account Recovery Window

If an account is scheduled for deletion (by you or a hacker), Discord provides a 15-day grace period to restore it. Simply log in with your credentials and click “Restore account.” Once 15 days pass, the data is permanently erased. Note: Accounts banned by Discord Trust & Safety cannot be restored via this method; you must submit a formal appeal.

How to Change Your Linked Email Address

Need to update your contact info? Here is how to swap your email:

On Desktop/Web

  1. Go to User Settings (cogwheel).
  2. Under “Account info,” click “Edit” next to your email.
  3. Click “Send verification code” and retrieve it from your current email.
  4. Paste the code, click “Next,” and select your reason for changing.
  5. Input your new email and your Discord password, then click “Done.”
  6. Verify the change via the email sent to your new address.

On Mobile

  1. Go to Settings > Account > Email.
  2. Tap “Send verification code” and retrieve it from your current inbox.
  3. Paste the code and tap “Next.”
  4. Enter your new email, tap “Change email,” provide your password, and tap “Done.”
  5. Verify the link sent to your new email address.

Automate Your Security with a Password Manager

Losing access to Discord means losing your communities, chat history, and connections. The best way to prevent this is by securing your credentials with a dedicated password manager.

Tools like NordPass centralize your passwords, passkeys, and sensitive data under robust XChaCha20 encryption. It generates unbreakable passwords, auto-fills your logins, syncs across all devices, and even scans the dark web for data breaches. Simplify your digital security and never lose a password again.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

How ID-Pal Reclaimed 40 Hours a Month on Security Administration Using NordLayer

Executive Summary: “We have the capability to build anything within our AWS environment, but managing VPNs isn’t our core business. NordLayer’s streamlined approach aligned perfectly with our operational goals—far better than native AWS tools.”

ID-Pal is an industry-leading, AI-driven identity verification platform utilized by regulated individuals and businesses in over 190 countries. Delivering comprehensive anti-money laundering (AML) screening, the 80-person enterprise embraces a hybrid and remote work model, with hubs in Dublin, London, New York, Columbus, and Lisbon.

Security is the foundation of ID-Pal’s operations and a primary driver behind their partnership with NordLayer. Achieving ISO 27001 certification was an early milestone for the company, supporting their unique competitive advantage: they are the only identity verification provider that maintains zero access to customer data.

Seeking to protect its global, distributed workforce without getting bogged down by tedious manual administration, ID-Pal transitioned to NordLayer. We sat down with Robert O’Farrell, ID-Pal’s CTO and co-founder, to discuss the operational hurdles NordLayer eliminated and the transformative results they achieved.


The Challenge: High DevOps Overhead and Manual Security Roadblocks

Prior to adopting NordLayer, ID-Pal managed access to its AWS infrastructure through highly manual processes. The DevOps team was tasked with maintaining allowlists containing over 50 distinct IP addresses scattered across dozens of infrastructure components.

Because every environment required separate management, a simple change—like an IP address update or a staff onboarding/offboarding—meant duplicating access rules across multiple systems. Eventually, ID-Pal hit the AWS security group limit, forcing them to spin up additional groups and maintain even more lists.

This decentralized, fragmented approach became a massive time sink for the DevOps team. It also elevated the risk of inconsistent access rules, overlooked updates, and active access lingering after an employee’s departure.

As O’Farrell points out, this manual strategy was never intended to be permanent. It was initially deployed as a stopgap to thwart automated cyberattacks targeting their non-production environments.

“Threat actors were actively probing for vulnerabilities that might exist in our production or non-production environments. We spotted the activity and locked it down the same day, but managing it manually became a massive operational bottleneck.”

ID-Pal quickly realized they needed a purpose-built security solution to centralize access, eliminate repetitive IP updates, and unburden their DevOps engineers. NordLayer proved to be the perfect fit.


The Solution: Why ID-Pal Chose NordLayer

While O’Farrell was personally familiar with Nord Security through his long-term use of NordVPN, he ensured his team conducted an objective evaluation of various B2B security vendors.

“We evaluated AWS’s native VPN solution as well. But when it came down to ease of deployment and ongoing maintenance, NordLayer was the obvious winner. It was clear it would save us a tremendous amount of time.”

Rigorous security due diligence was another non-negotiable factor. Because of their ISO 27001 status, ID-Pal adheres to strict vendor assessments. NordLayer passed with flying colors:

“NordLayer excelled during our due diligence. It demanded very little manual configuration, integrated seamlessly with our existing infrastructure, and was incredibly easy to roll out to the staff. Today, our entire technology department relies on it.”


The Impact: Transformative Benefits for ID-Pal

Benefit 1: Saving 40 Hours a Month Through Centralized IP Management

As a heavy AWS user, ID-Pal’s DevOps team previously juggled over 50 individual IPs across the AWS Web Application Firewall (WAF) and various security groups—accommodating both internal staff and integrated third-party platforms.

Maintaining duplicated rules across multiple environments was costing the company 40 hours of IT administration per month—roughly 25% of a full-time DevOps engineer’s capacity. By implementing NordLayer’s virtual private gateways and dedicated IP addresses, ID-Pal retired their manual IP tracking, slashed their administrative workload, and drastically minimized the risk of human error during provisioning.

Benefit 2: Intuitive Functionality and Consolidated Security

While their previous manual controls were secure, they were incredibly tedious to maintain. NordLayer’s centralized Control Panel changed the game, giving the DevOps team a single pane of glass to monitor user access across the organization.

“NordLayer’s configuration is beautifully intuitive. I don’t need to be an expert on the underlying mechanics. If I need two IP addresses for redundancy, I just specify that—and it’s done. With other platforms, you have to navigate dozens of convoluted settings, making it easy to miss critical security configurations.”

Benefit 3: Lightning-Fast Deployment and User Onboarding

ID-Pal kicked off with a 12-user pilot program involving QA developers, DevOps engineers, and the CTO. Following a flawless trial, they scaled the deployment to 36 active users across the entire technology team.

The rollout was incredibly swift. O’Farrell noted that the DevOps team configured AWS access within a week, and the complete rollout across all pre-production and non-production environments was finished in under two weeks—the exact length of a single agile sprint.


By the Numbers: ID-Pal’s Results

  • ~40 hours saved per month: Reclaimed a quarter of a full-time DevOps engineer’s workload by automating IP updates.
  • Streamlined Infrastructure: Consolidated 50+ scattered IPs into just 2 virtual private gateways using 4 dedicated IPs.
  • Rapid Deployment: Achieved a complete NordLayer rollout in under two weeks.
  • Frictionless Provisioning: Enabled instant onboarding and offboarding for staff.
  • Smooth Scaling: Effortlessly expanded from 12 to 36 users within the tech department while reducing human error.

Pro Tips: Cybersecurity Advice from ID-Pal’s CTO

Robert O’Farrell offers actionable advice for leaders looking to fortify their business security:

  • Start now, perfect later: “Implement your baseline controls immediately and iterate over time. You won’t anticipate every edge case, so don’t leave your business vulnerable while waiting for an illusion of perfection.”
  • Adapt security to your workflow: “We operate on a collaborative model where everyone contributes to our management system. Instead of blindly enforcing rigid policies, we consult our team and mold security controls to fit their actual daily workflows.”
  • Democratize the security process: “Rules dictated from an isolated IT silo are rarely followed. You can’t expect 100 employees to read a dense policy document and seamlessly apply it to their roles. You must involve them in the creation process.”

Conclusion

In less than two weeks, ID-Pal transformed a fragile, manual IP management process into a streamlined, highly secure infrastructure using NordLayer’s dedicated IPs. This transition allowed them to reclaim 40 hours of valuable engineering time every month, eliminate human error, and stay entirely focused on their mission: delivering top-tier identity verification with zero data access.

If managing VPNs and tracking IP addresses is distracting your team from driving your business forward, it’s time to upgrade. NordLayer is designed to remove that burden entirely.

About Nord Security
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.