# Security

# Your site and your logins are protected, with no setup

Your site has no WordPress plugins, so no security hole can come from a plugin. On a new device, your password isn’t enough to get in.

A code on every new device — An email for every suspicious login — Your visitors’ answers encrypted — Bots kept out

Request my site

![The Verify your sign-in page: the six-digit code sent by email, which expires in fifteen minutes, the Verify button and the Resend the code link.](https://static.lovelyrender.com/uploads/2026/10/247-securite-code.png)

## You know right away if someone tries to get in

Your account opens all your sites. Its protection is in place from day one, with nothing to turn on.

### A code on top of the password

On a device your account doesn’t know, a code is emailed to you after the password.

With an authenticator app, the code is asked for at every login. You get backup codes for the day you lose your phone.

![The Account page: the Signed-in devices section and its Sign out all my other devices button, then two-factor authentication turned on, with a reminder of the backup codes left and the Disable button.](https://static.lovelyrender.com/uploads/2026/10/261-securite-compte.png)

### A link to shut everything down if it wasn’t you

Every security email carries the This wasn’t me link. One click signs out all your devices. Then you change your password.

With an authenticator app, you get an email at every login and another as soon as someone types your correct password but fails the code.

![The Sign out all your devices? page, opened from the This wasn’t me link in a security email, with its Yes, sign out all my devices button.](https://static.lovelyrender.com/uploads/2026/10/260-securite-pas-moi.png)

[video](https://static.lovelyrender.com/uploads/2026/10/1422-bg-waves-lavender-light.webm)

## Your site closes the doors hackers come through

We keep the security of the server and the product up to date for you.

- ### No plugins to update Your site’s features are part of the product. No third-party plugin can open a security hole.
- ### No admin on your live site You work on the staging site. Your live site has no login page to attack.
- ### A site kept apart from the others A hacked neighboring site can’t reach yours.
- ### Bots kept out Bots looking for a security hole are banned. They stay out of your forms and your analytics.
- ### Your visitors’ answers encrypted Your site encrypts your visitors’ written answers before saving them.
- ### An SSL certificate (HTTPS) that’s always valid We create your domain name’s certificate and renew it before it expires.

[See how your forms keep bots out](https://lovelyrender.com/forms/)

## Your data is protected all the way into the database

In a stolen copy of the database, your passwords and what your visitors write stay unreadable.

### Unreadable passwords

Your password is never stored in plain text.

### A code for every export

Exporting your requests or your site requires a code. The owners are notified.

### Proof for every sensitive change

Changing your password or your email address requires your current password. You’re notified by email.

## Frequently asked questions

*### Can my WordPress site be hacked through a plugin?*

No, your site doesn’t have any. We update WordPress, the product and the server for all sites at once.

*### What happens if someone steals my password?*

They hit a wall at the code sent to your email address. You get an email and the This wasn’t me link signs everything out. Then change your password.

*### I’ve lost my phone. How do I log in?*

With one of your backup codes, if you use an authenticator app. Then, from your account, you sign out the lost phone along with your other devices.

*### Does another client’s hacked site put mine at risk?*

No. An intruder stays locked inside the site they took: they can neither read your files nor open your database.

*### Can the Lovely Render team log in to my site?*

Yes, to help you out. Its account always goes through verification and its actions on your site are recorded in the history.

*### Does my site comply with GDPR?*

Largely. Your data stays in France, your form answers are encrypted and your analytics are anonymous. Your site deletes data that is too old. The rest depends on how you use it and on your legal documents.

## Protect your account and your site with our guides

- ### [Log in and protect your account](https://lovelyrender.com/documentation/log-in-protect-account/)
- ### [Understanding your site’s security](https://lovelyrender.com/documentation/site-security/)

## Every plan includes all this security

Plans differ only in traffic and storage.

Request my site [See pricing](https://lovelyrender.com/pricing/)